Components Vulnerabilities Pricing MCP API

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

org.apache.htrace/htrace-webapp 4.2.0-incu… | Sonatype Guide

Get full component data and automated fixes with Sonatype Guide.

Sign up for free

org.apache.htrace

htrace-webapp

4.2.0-incubating

htrace-webapp 4.2.0-incubating

Latest

org.apache.htrace

PublishedSep 15, 2016•Policy

compliance

Developer Trust Score

Recommended Version:x.y.z

Recommended upgrade that meets your policy.

Compare Versions

Severity

Critical (0)

High (5)

Medium (0)

Low (0)

CVSS Score

0.010.0

EPSS Score

0.01.0

Malware

KEV StatusPublished

7.5CVE-2022-24785

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js.

PublishedApr 4, 2022

7.2CVE-2021-23358

The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

PublishedMar 31, 2021

7.5sonatype-2017-0422

moment - Regular Expression Denial of Service (ReDoS)

PublishedDec 7, 2017

7.5sonatype-2016-0133

jquery - Uncontrolled Resource Consumption

PublishedMar 28, 2017

7.5sonatype-2016-0010

moment - Regular Expression Denial of Service (ReDoS)

PublishedMar 28, 2017