Search for packages
Package details: pkg:maven/org.eclipse.jetty.http2/http2-hpack@9.4.52
purl pkg:maven/org.eclipse.jetty.http2/http2-hpack@9.4.52
Tags Ghost
Next non-vulnerable version 9.4.52.v20230823
Latest non-vulnerable version 11.0.16
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-1pjh-3upb-aaaq
Aliases:
CVE-2023-36478
GHSA-wgh7-54f2-x98r
HTTP/2 HPACK integer overflow and buffer allocation
9.4.52.v20230823
Affected by 0 other vulnerabilities.
9.4.53
Affected by 0 other vulnerabilities.
10.0.16
Affected by 0 other vulnerabilities.
11.0.16
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-09-17T22:42:33.647453+00:00 GitLab Importer Affected by VCID-1pjh-3upb-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty.http2/http2-hpack/CVE-2023-36478.yml 34.0.1
2024-09-17T22:02:39.381692+00:00 GHSA Importer Affected by VCID-1pjh-3upb-aaaq https://github.com/advisories/GHSA-wgh7-54f2-x98r 34.0.1
2024-04-23T17:40:27.365511+00:00 GHSA Importer Affected by VCID-1pjh-3upb-aaaq https://github.com/advisories/GHSA-wgh7-54f2-x98r 34.0.0rc4
2024-01-03T18:04:39.474684+00:00 GitLab Importer Affected by VCID-1pjh-3upb-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty.http2/http2-hpack/CVE-2023-36478.yml 34.0.0rc1
2024-01-03T17:37:28.351622+00:00 GHSA Importer Affected by VCID-1pjh-3upb-aaaq https://github.com/advisories/GHSA-wgh7-54f2-x98r 34.0.0rc1