Search for packages
Package details: pkg:maven/org.jgroups/jgroups@3.6.4
purl pkg:maven/org.jgroups/jgroups@3.6.4
Next non-vulnerable version 4.0.0.Final
Latest non-vulnerable version 4.0.0.Final
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-63q1-581t-aaag
Aliases:
CVE-2016-2141
GHSA-rc7h-x6cq-988q
Authorization bypass in JGroups JGroups does not require the proper headers for the ENCRYPT and AUTH protocols from nodes joining the cluster, which allows remote attackers to bypass security restrictions and send and receive messages within the cluster via unspecified vectors.
3.6.10.Final
Affected by 1 other vulnerability.
4.0.0.Final
Affected by 0 other vulnerabilities.
4.0
Affected by 0 other vulnerabilities.
4.0.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-03T20:41:44.794815+00:00 GitLab Importer Affected by VCID-63q1-581t-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml 36.1.0
2025-06-03T20:41:44.519514+00:00 GitLab Importer Affected by VCID-63q1-581t-aaag None 36.1.0
2025-06-02T20:21:20.584128+00:00 GitLab Importer Affected by VCID-63q1-581t-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml 36.1.2
2025-06-02T20:21:20.269244+00:00 GitLab Importer Affected by VCID-63q1-581t-aaag None 36.1.2
2025-05-14T19:24:11.404599+00:00 GitLab Importer Affected by VCID-63q1-581t-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jgroups/jgroups/CVE-2016-2141.yml 36.0.0
2025-05-14T19:24:10.696128+00:00 GitLab Importer Affected by VCID-63q1-581t-aaag None 36.0.0