Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.typesafe.play:play

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
Maven Central

Advisories 4

  • An issue was discovered in Play Framework 2.8.0 through 2.8.4.

    Affected: from 2.8.0, fixed in 2.8.5.

  • In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.

    Affected: from 2.6.0, fixed in 2.7.6; from 2.8.0, fixed in 2.8.3.

  • An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2.

    Affected: from 2.6.0, fixed in 2.7.6; from 2.8.0, fixed in 2.8.3.

  • In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.

    Affected: from 2.6.0, fixed in 2.7.6; from 2.8.0, fixed in 2.8.3.