org.apache.tapestry:tapestry-core vulnerabilities (Maven)

9 vulnerabilities.

• org.apache.tapestry:tapestry-core Maven Apache Tapestry prior to version 4 (EOL) allows RCE though deserialization of untrusted input CVE-2022-46366 Fix available 9.8 CriticalDecember 2, 2022
• org.apache.tapestry:tapestry-core Maven Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022) CVE-2022-31781 Fix available 7.5 HighJuly 13, 2022
• org.apache.tapestry:tapestry-core Maven An Information Disclosure due to insufficient input validation exists in Apache Tapestry 5.4.0 and later CVE-2021-30638 Fix available 7.5 HighApril 27, 2021
• org.apache.tapestry:tapestry-core Maven Bypass of the fix for CVE-2019-0195 CVE-2021-27850 Public exploitFix available EPSS 93.6% 9.8 CriticalApril 15, 2021
• org.apache.tapestry:tapestry-core Maven Improper file downloads in Apache Tapestry CVE-2020-13953 Fix available 5.3 MediumSeptember 30, 2020
• org.apache.tapestry:tapestry-core Maven Timing attack on HMAC signature comparison in Apache Tapestry CVE-2019-10071 Fix available 9.8 CriticalSeptember 16, 2019
• org.apache.tapestry:tapestry-core Maven Path traversal attack on Windows platforms CVE-2019-0207 Public exploitFix available 7.5 HighSeptember 16, 2019
• org.apache.tapestry:tapestry-core Maven Deserialization of Untrusted Data in Apache Tapestry CVE-2019-0195 Fix available EPSS 14.0% 9.8 CriticalSeptember 16, 2019
• org.apache.tapestry:tapestry-core Maven Apache Tapestry Unsafe Object Storage CVE-2014-1972 Fix available 7.8 HighAugust 22, 2015