Search for packages
Package details: pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@2.6.7
purl pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@2.6.7
Next non-vulnerable version 3.3.10
Latest non-vulnerable version 3.4.3
Risk 4.5
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-gtfj-ry3n-aaae
Aliases:
CVE-2020-13954
GHSA-64x2-gq24-75pv
Cross-site scripting in Apache CXF
3.3.8
Affected by 1 other vulnerability.
3.4.1
Affected by 1 other vulnerability.
VCID-vq6d-cmr8-aaah
Aliases:
CVE-2014-3584
GHSA-gw5j-77f9-v2g2
Denial of Service (DoS) via invalid JAX-RS SAML tokens The `SamlHeaderInHandler` in this package allows remote attackers to cause a denial of service (infinite loop) via a crafted SAML token in the authorization header of a request to a JAX-RS service.
2.6.11
Affected by 2 other vulnerabilities.
2.7.8
Affected by 2 other vulnerabilities.
3.0.1
Affected by 3 other vulnerabilities.
VCID-zggp-qr1y-aaaf
Aliases:
CVE-2021-22696
GHSA-7q4h-pj78-j7vg
Authorization service vulnerable to DDos attacks in Apache CFX
3.3.10
Affected by 0 other vulnerabilities.
3.4.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-su1r-fv61-aaap Denial of Service Attacks on Apache CXF The streaming XML parser in this package remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of elements, attributes, nested constructs, and possibly other vectors. CVE-2013-2160
GHSA-254q-rp36-v2m8

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T15:40:46.176094+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah None 36.1.3
2025-06-20T15:40:24.454073+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 36.1.3
2025-06-20T15:40:09.276790+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 36.1.3
2025-06-20T15:39:47.066064+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap None 36.1.3
2025-06-20T15:00:47.406313+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 36.1.3
2025-06-20T15:00:46.795396+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 36.1.3
2025-06-20T14:53:18.049875+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 36.1.3
2025-06-20T14:53:13.515346+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 36.1.3
2025-06-03T22:21:02.901755+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah None 36.1.0
2025-06-03T22:20:41.620662+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 36.1.0
2025-06-03T22:20:25.331347+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 36.1.0
2025-06-03T22:20:02.508922+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap None 36.1.0
2025-06-03T21:44:02.566470+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 36.1.0
2025-06-03T21:44:02.047719+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 36.1.0
2025-06-03T21:36:56.998127+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 36.1.0
2025-06-03T21:36:52.195633+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 36.1.0
2025-06-02T22:09:53.499131+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah None 36.1.2
2025-06-02T22:09:29.855694+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 36.1.2
2025-06-02T22:09:13.668197+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 36.1.2
2025-06-02T22:08:49.523048+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap None 36.1.2
2025-06-02T21:27:39.167456+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 36.1.2
2025-06-02T21:27:38.516099+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 36.1.2
2025-06-02T21:19:31.658077+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 36.1.2
2025-06-02T21:19:26.444277+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 36.1.2
2025-04-03T19:38:07.664472+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah None 36.0.0
2025-04-03T19:37:31.917656+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 36.0.0
2025-04-03T19:37:06.751487+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 36.0.0
2025-04-03T19:36:26.848182+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap None 36.0.0
2025-04-03T18:17:18.933616+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 36.0.0
2025-04-03T18:17:17.324276+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 36.0.0
2025-04-03T18:02:37.538798+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 36.0.0
2025-04-03T18:02:24.859198+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 36.0.0
2025-02-18T06:28:04.838147+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 35.1.0
2025-02-18T06:28:04.270204+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah None 35.1.0
2025-02-18T04:27:54.070767+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 35.1.0
2025-02-18T04:27:53.791178+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap None 35.1.0
2025-02-18T00:02:52.348147+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 35.1.0
2025-02-18T00:02:44.919555+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 35.1.0
2025-02-17T23:33:19.628185+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 35.1.0
2025-02-17T23:33:12.629135+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 35.1.0
2025-01-17T02:29:10.513649+00:00 GHSA Importer Fixing VCID-su1r-fv61-aaap None 35.1.0
2024-11-21T02:31:58.090600+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 35.0.0
2024-11-21T01:21:52.322179+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 35.0.0
2024-11-20T22:59:08.025735+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 35.0.0
2024-11-20T22:37:47.399901+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 35.0.0
2024-11-19T02:15:18.461489+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 34.3.2
2024-11-19T01:08:02.374396+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 34.3.2
2024-11-18T22:45:46.089663+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 34.3.2
2024-11-18T22:29:02.432427+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 34.3.2
2024-10-15T18:08:34.151096+00:00 GithubOSV Importer Fixing VCID-su1r-fv61-aaap https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-254q-rp36-v2m8/GHSA-254q-rp36-v2m8.json 34.0.2
2024-10-08T02:49:23.675259+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 34.0.2
2024-10-08T01:43:29.948451+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 34.0.2
2024-10-07T23:45:59.691489+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 34.0.2
2024-10-07T23:29:43.825813+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 34.0.2
2024-10-07T16:54:28.359642+00:00 GHSA Importer Affected by VCID-vq6d-cmr8-aaah https://github.com/advisories/GHSA-gw5j-77f9-v2g2 34.0.2
2024-10-07T16:44:54.760851+00:00 GHSA Importer Fixing VCID-su1r-fv61-aaap https://github.com/advisories/GHSA-254q-rp36-v2m8 34.0.2
2024-09-23T02:46:59.393118+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 34.0.1
2024-09-23T00:00:15.793446+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 34.0.1
2024-09-22T23:43:46.188259+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 34.0.1
2024-09-22T17:18:35.166975+00:00 GHSA Importer Affected by VCID-vq6d-cmr8-aaah https://github.com/advisories/GHSA-gw5j-77f9-v2g2 34.0.1
2024-09-18T09:09:26.380752+00:00 GithubOSV Importer Fixing VCID-su1r-fv61-aaap https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-254q-rp36-v2m8/GHSA-254q-rp36-v2m8.json 34.0.1
2024-09-17T22:37:35.638143+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 34.0.1
2024-09-17T22:04:23.508434+00:00 GHSA Importer Fixing VCID-su1r-fv61-aaap https://github.com/advisories/GHSA-254q-rp36-v2m8 34.0.1
2024-04-24T05:21:25.131858+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 34.0.0rc4
2024-04-24T05:21:24.563569+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah None 34.0.0rc4
2024-04-24T04:03:02.964627+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 34.0.0rc4
2024-04-24T04:03:02.640944+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap None 34.0.0rc4
2024-04-24T02:02:58.150372+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 34.0.0rc4
2024-04-24T02:02:52.860548+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 34.0.0rc4
2024-04-24T01:45:01.012807+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 34.0.0rc4
2024-04-24T01:44:56.100898+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 34.0.0rc4
2024-04-23T23:05:19.468346+00:00 GithubOSV Importer Fixing VCID-su1r-fv61-aaap https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-254q-rp36-v2m8/GHSA-254q-rp36-v2m8.json 34.0.0rc4
2024-04-23T18:03:19.274470+00:00 GHSA Importer Affected by VCID-vq6d-cmr8-aaah None 34.0.0rc4
2024-04-23T18:03:18.525973+00:00 GHSA Importer Affected by VCID-vq6d-cmr8-aaah https://github.com/advisories/GHSA-gw5j-77f9-v2g2 34.0.0rc4
2024-04-23T17:55:47.188100+00:00 GHSA Importer Fixing VCID-su1r-fv61-aaap None 34.0.0rc4
2024-04-23T17:55:46.178279+00:00 GHSA Importer Fixing VCID-su1r-fv61-aaap https://github.com/advisories/GHSA-254q-rp36-v2m8 34.0.0rc4
2024-01-10T07:53:07.915578+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 34.0.0rc2
2024-01-10T07:53:07.352076+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah None 34.0.0rc2
2024-01-10T06:38:37.407170+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 34.0.0rc2
2024-01-10T06:38:37.090154+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap None 34.0.0rc2
2024-01-10T04:35:43.058801+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 34.0.0rc2
2024-01-10T04:35:37.843027+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 34.0.0rc2
2024-01-10T04:16:06.096568+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 34.0.0rc2
2024-01-10T04:16:01.180685+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 34.0.0rc2
2024-01-09T19:59:04.674709+00:00 GHSA Importer Affected by VCID-vq6d-cmr8-aaah None 34.0.0rc2
2024-01-09T19:59:03.848531+00:00 GHSA Importer Affected by VCID-vq6d-cmr8-aaah https://github.com/advisories/GHSA-gw5j-77f9-v2g2 34.0.0rc2
2024-01-09T19:52:26.945666+00:00 GHSA Importer Fixing VCID-su1r-fv61-aaap None 34.0.0rc2
2024-01-09T19:52:25.926728+00:00 GHSA Importer Fixing VCID-su1r-fv61-aaap https://github.com/advisories/GHSA-254q-rp36-v2m8 34.0.0rc2
2024-01-04T00:38:16.099825+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2014-3584.yml 34.0.0rc1
2024-01-04T00:38:15.534628+00:00 GitLab Importer Affected by VCID-vq6d-cmr8-aaah None 34.0.0rc1
2024-01-03T23:25:11.712934+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap None 34.0.0rc1
2024-01-03T21:22:31.628504+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf None 34.0.0rc1
2024-01-03T21:22:26.251537+00:00 GitLab Importer Affected by VCID-zggp-qr1y-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2021-22696.yml 34.0.0rc1
2024-01-03T21:00:12.010452+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae None 34.0.0rc1
2024-01-03T21:00:06.997678+00:00 GitLab Importer Affected by VCID-gtfj-ry3n-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2020-13954.yml 34.0.0rc1
2024-01-03T18:00:29.707862+00:00 GitLab Importer Fixing VCID-su1r-fv61-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-rt-frontend-jaxrs/CVE-2013-2160.yml 34.0.0rc1
2024-01-03T17:39:09.110808+00:00 GHSA Importer Fixing VCID-su1r-fv61-aaap https://github.com/advisories/GHSA-254q-rp36-v2m8 34.0.0rc1
2024-01-03T15:27:17.168147+00:00 GHSA Importer Affected by VCID-vq6d-cmr8-aaah None 34.0.0rc1
2024-01-03T15:22:33.724063+00:00 GHSA Importer Fixing VCID-su1r-fv61-aaap None 34.0.0rc1