Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.grails:grails-databinding

2 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 medium
Registry
Maven Central

Advisories 2

  • CVE-2023-46131Medium 6.5

    Grails® data binding causes JVM crash and/or DoS

    Affected: from 6.0.0, fixed in 6.1.0; from 5.0.0, fixed in 5.3.4; from 4.0.0, fixed in 4.1.3; from 2.0.0, fixed in 3.3.17.

  • In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8…

    Affected: from 3.3.10, fixed in 3.3.15; from 4.0.0, fixed in 4.1.1; from 5.0.0, fixed in 5.1.9; from 5.2.0, fixed in 5.2.1.