VYPR

java-spring-cloud-stream-template

by AsyncAPI

CVEs (1)

  • CVE-2021-37694HigAug 11, 2021
    risk 0.57cvss 8.7epss 0.01

    @asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream (SCSt) microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no…