Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jgroups/jgroups@3.3.3.Final
purl pkg:maven/org.jgroups/jgroups@3.3.3.Final
Next non-vulnerable version 4.0.0.Final
Latest non-vulnerable version 4.0.0.Final
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-h873-uz9q-ebcr
Aliases:
CVE-2016-2141
GHSA-rc7h-x6cq-988q
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.
3.6.10.Final
Affected by 1 other vulnerability.
4.0
Affected by 0 other vulnerabilities.
4.0.0.Final
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-vsfy-3jf4-aqg7 Authentication via cached credentials The `DiagnosticsHandler` in this package allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials. CVE-2013-4112
GHSA-cc62-496p-hrr7

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-11T21:44:43.096627+00:00 GitLab Importer Affected by VCID-h873-uz9q-ebcr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml 38.3.0
2026-04-11T21:41:15.697994+00:00 GitLab Importer Fixing VCID-vsfy-3jf4-aqg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2013-4112.yml 38.3.0
2026-04-04T14:31:44.730984+00:00 GHSA Importer Fixing VCID-vsfy-3jf4-aqg7 https://github.com/advisories/GHSA-cc62-496p-hrr7 38.1.0
2026-04-02T21:58:47.012895+00:00 GitLab Importer Affected by VCID-h873-uz9q-ebcr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml 38.1.0
2026-04-02T21:55:25.535902+00:00 GitLab Importer Fixing VCID-vsfy-3jf4-aqg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2013-4112.yml 38.1.0
2026-04-01T16:16:03.851600+00:00 GitLab Importer Affected by VCID-h873-uz9q-ebcr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml 38.0.0
2026-04-01T13:08:36.945721+00:00 GithubOSV Importer Fixing VCID-vsfy-3jf4-aqg7 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-cc62-496p-hrr7/GHSA-cc62-496p-hrr7.json 38.0.0
2026-04-01T12:46:50.291706+00:00 GitLab Importer Fixing VCID-vsfy-3jf4-aqg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2013-4112.yml 38.0.0