Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

fish.payara.distributions:payara

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 high
Dependents
0
Registry
Maven Central

Advisories 2

  • A critical vulnerability in Admin GUI in Payara Server Full 4.x, 5.x, 6.x, 7.x, 7.2026.x, 6.2025.x, 6.2024.x on All platforms that allows…

    Affected: from 4.0.0, fixed in 7.2026.6.

  • Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability…

    Affected: from 6.2021.1.Alpha1, fixed in 6.2022.2; from 5.0.0.Alpha1, fixed in 5.2022.5; through 4.1.2.181.