org.infinispan:infinispan-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-5384Mediumorg.infinispan:infinispan-core: Infinispan caches credentials in clear text CVE-2019-10174Highorg.infinispan:infinispan-core: Use of Externally-Controlled Input to Select Classes or Code in Infinispan CVE-2017-15089Highorg.infinispan:infinispan-core: Deserialization of Untrusted Data in Infinispan CVE-2016-0750Highorg.infinispan:infinispan-core: Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization CVE-2018-1131Highorg.infinispan:infinispan-core: Deserialization of Untrusted Data in Infinispan CVE-2020-25711Mediumorg.infinispan:infinispan-core: Improper Access Control in infinispan-server-runtime CVE-2019-10158Criticalorg.infinispan:infinispan-core: Improper implementation of the session fixation protection in Infinispan

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo