Jooby
by Jooby
Source repositories
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-7622 | Med | 0.35 | 6.5 | 0.02 | Apr 6, 2020 | This affects the package io.jooby:jooby-netty before 1.6.9, from 2.0.0 and before 2.2.1. The DefaultHttpHeaders is set to false which means it does not validates that the header isn't being abused for HTTP Response Splitting. | ||
| CVE-2019-15477 | Med | 0.33 | 6.1 | 0.01 | Aug 23, 2019 | Jooby before 1.6.4 has XSS via the default error handler. | ||
| CVE-2020-7647 | Med | 0.28 | 5.3 | 0.02 | May 11, 2020 | All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors. |
- risk 0.35cvss 6.5epss 0.02
This affects the package io.jooby:jooby-netty before 1.6.9, from 2.0.0 and before 2.2.1. The DefaultHttpHeaders is set to false which means it does not validates that the header isn't being abused for HTTP Response Splitting.
- risk 0.33cvss 6.1epss 0.01
Jooby before 1.6.4 has XSS via the default error handler.
- risk 0.28cvss 5.3epss 0.02
All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.