Skip to main content
← Maven

org.grails:grails-core

2 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 high
Registry
Maven Central

Advisories 2

  • Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service.

    Affected: fixed in 3.3.10.

  • Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS .

    Affected: fixed in 3.3.6.