org.apache.dubbo:dubbo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-46279Criticalorg.apache.dubbo:dubbo: Apache Dubbo: Bypass deny serialize list check in Apache Dubbo CVE-2023-29234Criticalorg.apache.dubbo:dubbo: Bypass serialize checks in Apache Dubbo CVE-2023-23638Criticalorg.apache.dubbo:dubbo: Apache Dubbo vulnerable to Deserialization of Untrusted Data CVE-2022-39198Criticalcom.alibaba:hessian-lite: Hessian Lite for Apache Dubbo deserialization vulnerability CVE-2022-24969Mediumorg.apache.dubbo:dubbo: Server-side request forgery in Apache Dubbo CVE-2021-30180Criticalorg.apache.dubbo:dubbo: Code injection in Apache Dubbo CVE-2021-30179Criticalorg.apache.dubbo:dubbo: Deserialization of Untrusted Data in Apache Dubbo CVE-2021-30181Criticalcom.alibaba:dubbo: Code injection in Apache Dubbo CVE-2021-25640Mediumorg.apache.dubbo:dubbo: Server-Side Request Forgery in Apache Dubbo CVE-2021-25641Criticalorg.apache.dubbo:dubbo: Deserializer tampering in Apache Dubbo CVE-2020-1948Criticalorg.apache.dubbo:dubbo: Deserialization of Untrusted Data in Apache Dubbo CVE-2021-43297Criticalorg.apache.dubbo:dubbo: Deserialization of Untrusted Data in Dubbo CVE-2021-37579Criticalorg.apache.dubbo:dubbo: Security check skip in Apache Dubbo CVE-2021-36161Criticalorg.apache.dubbo:dubbo: Remote Code Execution in Apache Dubbo CVE-2021-36162Highorg.apache.dubbo:dubbo: Remote Code Execution in Apache Dubbo CVE-2021-36163Criticalorg.apache.dubbo:dubbo: Hessian protocol configuration vulnerability in Apache Dubbo

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo