org.hibernate.reactive:hibernate-reactive-core@4.2.0.CR2
latest version
4.5.5.Final
latest non vulnerable version
first published
6 years ago
latest version published
15 days ago
licenses detected
- [1.0.0.CR7,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.hibernate.reactive:hibernate-reactive-core package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.hibernate.reactive:hibernate-reactive-core is a The core module of Hibernate Reactive Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime by leaving transactions open in the connection pool. An attacker can cause resource exhaustion by prematurely closing HTTP connections during database operations, leading to leaked database connections and service disruption. How to fix Missing Release of Resource after Effective Lifetime? Upgrade | [,3.1.12.Final)[3.2.0.CR1,3.2.1.Final)[4.0.0.Beta1,4.1.10.Final)[4.2.0.CR1,4.2.1.Final) |