Search for packages
| purl | pkg:maven/org.jasypt/jasypt@1.9.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4bbz-11ta-ybft | jasypt before 1.9.2 allows a timing attack against the password hash comparison. |
CVE-2014-9970
GHSA-r5c2-rxh2-f5h2 |