Search for packages
| purl | pkg:maven/org.jgroups/jgroups@3.2.16.Final |
| Next non-vulnerable version | 4.0.0.Final |
| Latest non-vulnerable version | 4.0.0.Final |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-h873-uz9q-ebcr
Aliases: CVE-2016-2141 GHSA-rc7h-x6cq-988q |
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-h873-uz9q-ebcr | It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks. |
CVE-2016-2141
GHSA-rc7h-x6cq-988q |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-11T21:44:43.056902+00:00 | GitLab Importer | Affected by | VCID-h873-uz9q-ebcr | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml | 38.3.0 |
| 2026-04-02T21:58:46.977164+00:00 | GitLab Importer | Affected by | VCID-h873-uz9q-ebcr | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml | 38.1.0 |
| 2026-04-01T16:16:03.807369+00:00 | GitLab Importer | Affected by | VCID-h873-uz9q-ebcr | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml | 38.0.0 |
| 2026-04-01T16:00:51.812245+00:00 | GHSA Importer | Fixing | VCID-h873-uz9q-ebcr | https://github.com/advisories/GHSA-rc7h-x6cq-988q | 38.0.0 |
| 2026-04-01T13:08:10.400619+00:00 | GithubOSV Importer | Fixing | VCID-h873-uz9q-ebcr | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-rc7h-x6cq-988q/GHSA-rc7h-x6cq-988q.json | 38.0.0 |