VulnerableCode Package Details - pkg:maven/io.helidon/helidon-dependencies@1.4.10

Search for packages

Vulnerability	Summary	Fixed by
VCID-555c-e151-fudr Aliases: CVE-2022-21404	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Reactive WebServer). Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).	1.4.11 Affected by 0 other vulnerabilities. 2.0.0-RC2 Affected by 0 other vulnerabilities. 2.0.1 Affected by 0 other vulnerabilities.
VCID-tdp2-ve8k-zbds Aliases: CVE-2021-37136 GHSA-grg4-wf29-r9vv	The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack	1.4.11 Affected by 0 other vulnerabilities. 2.4.1 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-555c-e151-fudr
Aliases:
CVE-2022-21404

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Reactive WebServer). Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

1.4.11
Affected by 0 other vulnerabilities.

2.0.0-RC2
Affected by 0 other vulnerabilities.

2.0.1
Affected by 0 other vulnerabilities.

VCID-tdp2-ve8k-zbds
Aliases:
CVE-2021-37136
GHSA-grg4-wf29-r9vv

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack

1.4.11
Affected by 0 other vulnerabilities.

2.4.1
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-07-03T18:14:21.102420+00:00	GitLab Importer	Affected by	VCID-555c-e151-fudr	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.helidon/helidon-dependencies/CVE-2022-21404.yml	37.0.0
2025-07-03T18:05:49.581725+00:00	GitLab Importer	Affected by	VCID-tdp2-ve8k-zbds	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.helidon/helidon-dependencies/CVE-2021-37136.yml	37.0.0
2025-07-01T18:12:56.783294+00:00	GitLab Importer	Affected by	VCID-555c-e151-fudr	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.helidon/helidon-dependencies/CVE-2022-21404.yml	36.1.3
2025-07-01T18:12:07.909575+00:00	GitLab Importer	Affected by	VCID-tdp2-ve8k-zbds	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.helidon/helidon-dependencies/CVE-2021-37136.yml	36.1.3