Check

feat: Update dependencies in hale-platform to resolve security issues #24

Annotations

10 errors

XXE injection vulnerability

h2: Remote Code Execution in Console

Loading of custom classes from remote servers through JNDI

OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

tika: Native deserialization of Java objects in matlab files

GeoTools OGC Filter SQL Injection Vulnerabilities

Untrusted input may lead to RCE attack

cas-client: Bypass of security constraints via URL parameter injection

jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes

postgresql-jdbc: Arbitrary File Write Vulnerability