Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.infinispan/infinispan-core@10.0.0.Final
purl pkg:maven/org.infinispan/infinispan-core@10.0.0.Final
Next non-vulnerable version 11.0.6.Final
Latest non-vulnerable version 15.0.0.Dev07
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-f2rc-7h94-wyhb
Aliases:
CVE-2020-25711
GHSA-8674-26jc-wh98
Missing Authorization A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.
11.0.6.Final
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gyhd-8wsj-gyac Improper implementation of the session fixation protection in Infinispan A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling. CVE-2019-10158
GHSA-6x3v-rw2q-9gx7

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:39:00.406748+00:00 GitLab Importer Affected by VCID-f2rc-7h94-wyhb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2020-25711.yml 38.4.0
2026-04-16T20:59:55.777194+00:00 GitLab Importer Fixing VCID-gyhd-8wsj-gyac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2019-10158.yml 38.4.0
2026-04-11T22:54:10.356060+00:00 GitLab Importer Affected by VCID-f2rc-7h94-wyhb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2020-25711.yml 38.3.0
2026-04-11T22:11:10.983054+00:00 GitLab Importer Fixing VCID-gyhd-8wsj-gyac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2019-10158.yml 38.3.0
2026-04-02T23:03:21.300268+00:00 GitLab Importer Affected by VCID-f2rc-7h94-wyhb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2020-25711.yml 38.1.0
2026-04-02T22:23:41.906631+00:00 GitLab Importer Fixing VCID-gyhd-8wsj-gyac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2019-10158.yml 38.1.0
2026-04-01T17:22:16.169679+00:00 GitLab Importer Affected by VCID-f2rc-7h94-wyhb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2020-25711.yml 38.0.0
2026-04-01T16:41:30.267494+00:00 GitLab Importer Fixing VCID-gyhd-8wsj-gyac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.infinispan/infinispan-core/CVE-2019-10158.yml 38.0.0