Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jgroups/jgroups@4.0.0.Final
purl pkg:maven/org.jgroups/jgroups@4.0.0.Final
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-h873-uz9q-ebcr It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks. CVE-2016-2141
GHSA-rc7h-x6cq-988q

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T20:34:15.109990+00:00 GitLab Importer Fixing VCID-h873-uz9q-ebcr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml 38.4.0
2026-04-11T21:44:43.318119+00:00 GitLab Importer Fixing VCID-h873-uz9q-ebcr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml 38.3.0
2026-04-02T21:58:47.206082+00:00 GitLab Importer Fixing VCID-h873-uz9q-ebcr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml 38.1.0
2026-04-01T16:16:04.133345+00:00 GitLab Importer Fixing VCID-h873-uz9q-ebcr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml 38.0.0