Check

feat: Update bundled resources/INSPIRE presets used in hale studio #29

Annotations

10 errors

logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

XXE injection vulnerability

h2: Remote Code Execution in Console

Loading of custom classes from remote servers through JNDI

OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

XStream: remote code execution due to insecure XML deserialization

XStream: SSRF via crafted input stream

XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet

XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry