org.infinispan:infinispan-core@8.0.0.Alpha1 vulnerabilities
latest version
15.1.4.Final
first published
13 years ago
latest version published
9 days ago
licenses detected
- [6.0.0.Alpha1,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.infinispan:infinispan-core package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.infinispan:infinispan-core is a data grid platform and highly scalable NoSQL cloud data store. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File when using How to fix Insertion of Sensitive Information into Log File? There is no fixed version for | [0,) |
org.infinispan:infinispan-core is a data grid platform and highly scalable NoSQL cloud data store. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possible further attacks. How to fix Deserialization of Untrusted Data? Upgrade | [7.0.0.Final,9.3.0.Final) |