org.codehaus.groovy:groovy@2.3.0-rc-4 vulnerabilities
latest version
3.0.23
latest non vulnerable version
first published
17 years ago
latest version published
1 months ago
licenses detected
- [0,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.codehaus.groovy:groovy package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of the package are vulnerable to Deserialization of Untrusted Data via the How to fix Deserialization of Untrusted Data? Upgrade | [,2.4.7) |
Affected versions of How to fix Deserialization of Untrusted Data? Upgrade | [1.7.0,2.4.4) |
org.codehaus.groovy:groovy is a language for the JVM Affected versions of this package are vulnerable to Information Disclosure. Groovy may create temporary directories within the OS temporary directory which is shared between all users on affected systems. This vulnerability only impacts Unix-like systems, and very old versions of Mac OSX and Windows. How to fix Information Disclosure? Upgrade | [,2.4.21)[2.5.0,2.5.14)[3.0.0,3.0.7)[4.0.0-alpha-1,4.0.0-alpha-2) |