Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jgroups:jgroups

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Maven Central

Advisories 2

  • It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster.

    Affected: from 3.3.0.Alpha1, fixed in 3.6.10.Final; fixed in 3.2.16.Final.

  • The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive…

    Affected: from 3.0.0, fixed in 3.2.9.Final; from 3.3.0, fixed in 3.3.3.Final.