Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.hawkbit/hawkbit-parent@0.2.0M5
purl pkg:maven/org.eclipse.hawkbit/hawkbit-parent@0.2.0M5
Next non-vulnerable version 0.3.0M2
Latest non-vulnerable version 0.3.0M7
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-g6hq-b2sb-3ua4
Aliases:
CVE-2020-27219
GHSA-rcvx-rmvf-mxch
0.4.0
Affected by 0 other vulnerabilities.
0.3.0M1
Affected by 1 other vulnerability.
0.3.0M7
Affected by 0 other vulnerabilities.
VCID-ksap-gbj6-7qb5
Aliases:
CVE-2019-10240
GHSA-jwqm-c9f2-2cq3
Man in the Middle Eclipse hawkBit resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected.
0.3.0M2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-01T06:00:46.272221+00:00 GitLab Importer Affected by VCID-g6hq-b2sb-3ua4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.hawkbit/hawkbit-parent/CVE-2020-27219.yml 38.6.0
2026-05-31T09:55:14.237644+00:00 GitLab Importer Affected by VCID-ksap-gbj6-7qb5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.hawkbit/hawkbit-parent/CVE-2019-10240.yml 38.6.0