VulnerableCode Package Details - pkg:maven/io.helidon/helidon-dependencies@1.4.11

Search for packages

Vulnerability	Summary	Fixed by
This package is not known to be affected by vulnerabilities.

Vulnerability

Summary

Fixed by

This package is not known to be affected by vulnerabilities.

Vulnerability	Summary	Aliases
VCID-555c-e151-fudr	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Reactive WebServer). Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).	CVE-2022-21404
VCID-tdp2-ve8k-zbds	The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack	CVE-2021-37136 GHSA-grg4-wf29-r9vv

Vulnerability

Summary

Aliases

VCID-555c-e151-fudr

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Reactive WebServer). Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in takeover of Helidon. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2022-21404

VCID-tdp2-ve8k-zbds

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack

CVE-2021-37136
GHSA-grg4-wf29-r9vv

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-07-03T18:14:21.104218+00:00	GitLab Importer	Fixing	VCID-555c-e151-fudr	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.helidon/helidon-dependencies/CVE-2022-21404.yml	37.0.0
2025-07-03T18:05:49.583454+00:00	GitLab Importer	Fixing	VCID-tdp2-ve8k-zbds	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.helidon/helidon-dependencies/CVE-2021-37136.yml	37.0.0
2025-07-01T18:12:56.790222+00:00	GitLab Importer	Fixing	VCID-555c-e151-fudr	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.helidon/helidon-dependencies/CVE-2022-21404.yml	36.1.3
2025-07-01T18:12:07.917569+00:00	GitLab Importer	Fixing	VCID-tdp2-ve8k-zbds	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.helidon/helidon-dependencies/CVE-2021-37136.yml	36.1.3