Components Vulnerabilities Pricing MCP API

com.github.liuzhenghui/ecology-plugin-arch… | Sonatype Guide

com.github.liuzhenghui

ecology-plugin-archetype

1.0.3

ecology-plugin-archetype 1.0.3

Latest

com.github.liuzhenghui

PublishedMar 23, 2022•Policy

compliance

Developer Trust Score

N/A

Recommended Version:x.y.zBest

Latest version with 0 known vulnerabilities that meets your policy.

Compare Versions

Severity

Critical (0)

High (8)

Medium (0)

Low (0)

CVSS Score

0.010.0

EPSS Score

0.01.0

Malware

KEV StatusPublished

7.5CVE-2023-51075

hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.

PublishedDec 28, 2023

7.5CVE-2023-3276

A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue is the function readBySax of the file XmlUtil.java of the component XML Parsing Module. The manipulation leads to xml external entity reference. The exploit has been disclosed to the public and may be used. VDB-231626 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

PublishedJun 16, 2023

7.5CVE-2022-4565

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.8.11 is able to address this issue. It is recommended to upgrade the affected component. VDB-215974 is the identifier assigned to this vulnerability.

PublishedDec 19, 2022

7.5CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error.

PublishedDec 14, 2022

7.5CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

PublishedDec 14, 2022

7.5CVE-2022-45688

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

7.5CVE-2022-25857

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

7.5sonatype-2016-0133

jquery - Uncontrolled Resource Consumption

Dec 14, 2022

Sep 5, 2022

Published

Mar 28, 2017