Check

feat: Update dependencies in hale-platform to resolve security issues #22

Annotations

10 errors

XXE injection vulnerability

h2: Remote Code Execution in Console

Loading of custom classes from remote servers through JNDI

OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

tika: Native deserialization of Java objects in matlab files

jetty: HTTP request smuggling

jetty: Incorrect header handling

GeoTools OGC Filter SQL Injection Vulnerabilities

Untrusted input may lead to RCE attack

cas-client: Bypass of security constraints via URL parameter injection