Search for packages
Package details: pkg:maven/org.eclipse.jetty.http2/http2-hpack@9.3.0
purl pkg:maven/org.eclipse.jetty.http2/http2-hpack@9.3.0
Tags Ghost
Next non-vulnerable version 9.4.52.v20230823
Latest non-vulnerable version 11.0.16
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-1pjh-3upb-aaaq
Aliases:
CVE-2023-36478
GHSA-wgh7-54f2-x98r
HTTP/2 HPACK integer overflow and buffer allocation
9.4.52.v20230823
Affected by 0 other vulnerabilities.
9.4.53
Affected by 0 other vulnerabilities.
10.0.16
Affected by 0 other vulnerabilities.
11.0.16
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-09-17T22:42:33.642413+00:00 GitLab Importer Affected by VCID-1pjh-3upb-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty.http2/http2-hpack/CVE-2023-36478.yml 34.0.1
2024-09-17T22:02:39.376566+00:00 GHSA Importer Affected by VCID-1pjh-3upb-aaaq https://github.com/advisories/GHSA-wgh7-54f2-x98r 34.0.1
2024-04-23T17:40:27.360608+00:00 GHSA Importer Affected by VCID-1pjh-3upb-aaaq https://github.com/advisories/GHSA-wgh7-54f2-x98r 34.0.0rc4
2024-01-03T18:04:39.469919+00:00 GitLab Importer Affected by VCID-1pjh-3upb-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty.http2/http2-hpack/CVE-2023-36478.yml 34.0.0rc1
2024-01-03T17:37:28.346919+00:00 GHSA Importer Affected by VCID-1pjh-3upb-aaaq https://github.com/advisories/GHSA-wgh7-54f2-x98r 34.0.0rc1