Find, fix and prevent vulnerabilities in your code.
high severity
- Vulnerable module: commons-lang:commons-lang
- Introduced through: commons-lang:commons-lang@2.6
Detailed paths
-
Introduced through: WouterVerleur/D-D-Charactersheets-and-battle-control@WouterVerleur/D-D-Charactersheets-and-battle-control#dd1e414645a880d72b6fba02fba9610b8a14ccf5 › commons-lang:commons-lang@2.6
Overview
Affected versions of this package are vulnerable to Uncontrolled Recursion via the ClassUtils.getClass
function. An attacker can cause the application to terminate unexpectedly by providing excessively long input values.
Remediation
There is no fixed version for commons-lang:commons-lang
.
References
medium severity
- Module: ch.qos.logback:logback-classic
- Introduced through: ch.qos.logback:logback-classic@1.5.18
Detailed paths
-
Introduced through: WouterVerleur/D-D-Charactersheets-and-battle-control@WouterVerleur/D-D-Charactersheets-and-battle-control#dd1e414645a880d72b6fba02fba9610b8a14ccf5 › ch.qos.logback:logback-classic@1.5.18
Dual license: EPL-1.0, LGPL-2.1
medium severity
- Module: ch.qos.logback:logback-core
- Introduced through: ch.qos.logback:logback-classic@1.5.18
Detailed paths
-
Introduced through: WouterVerleur/D-D-Charactersheets-and-battle-control@WouterVerleur/D-D-Charactersheets-and-battle-control#dd1e414645a880d72b6fba02fba9610b8a14ccf5 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18
Dual license: EPL-1.0, LGPL-2.1
medium severity
- Module: com.openhtmltopdf:openhtmltopdf-core
- Introduced through: com.openhtmltopdf:openhtmltopdf-pdfbox@1.0.10
Detailed paths
-
Introduced through: WouterVerleur/D-D-Charactersheets-and-battle-control@WouterVerleur/D-D-Charactersheets-and-battle-control#dd1e414645a880d72b6fba02fba9610b8a14ccf5 › com.openhtmltopdf:openhtmltopdf-pdfbox@1.0.10 › com.openhtmltopdf:openhtmltopdf-core@1.0.10
LGPL-2.1 license
medium severity
- Module: com.openhtmltopdf:openhtmltopdf-pdfbox
- Introduced through: com.openhtmltopdf:openhtmltopdf-pdfbox@1.0.10
Detailed paths
-
Introduced through: WouterVerleur/D-D-Charactersheets-and-battle-control@WouterVerleur/D-D-Charactersheets-and-battle-control#dd1e414645a880d72b6fba02fba9610b8a14ccf5 › com.openhtmltopdf:openhtmltopdf-pdfbox@1.0.10
LGPL-2.1 license
medium severity
- Module: junit:junit
- Introduced through: org.apache.pdfbox:pdfbox@2.0.24 and com.openhtmltopdf:openhtmltopdf-pdfbox@1.0.10
Detailed paths
-
Introduced through: WouterVerleur/D-D-Charactersheets-and-battle-control@WouterVerleur/D-D-Charactersheets-and-battle-control#dd1e414645a880d72b6fba02fba9610b8a14ccf5 › org.apache.pdfbox:pdfbox@2.0.24 › org.apache.pdfbox:fontbox@2.0.24 › junit:junit@4.13.2
-
Introduced through: WouterVerleur/D-D-Charactersheets-and-battle-control@WouterVerleur/D-D-Charactersheets-and-battle-control#dd1e414645a880d72b6fba02fba9610b8a14ccf5 › com.openhtmltopdf:openhtmltopdf-pdfbox@1.0.10 › org.apache.pdfbox:xmpbox@2.0.24 › junit:junit@4.13.2
-
Introduced through: WouterVerleur/D-D-Charactersheets-and-battle-control@WouterVerleur/D-D-Charactersheets-and-battle-control#dd1e414645a880d72b6fba02fba9610b8a14ccf5 › com.openhtmltopdf:openhtmltopdf-pdfbox@1.0.10 › org.apache.pdfbox:pdfbox@2.0.24 › org.apache.pdfbox:fontbox@2.0.24 › junit:junit@4.13.2
EPL-1.0 license