Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.alluxio/alluxio-parent@1.5.0
purl pkg:maven/org.alluxio/alluxio-parent@1.5.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-298m-hvgh-x9cw
Aliases:
CVE-2020-21485
Alluxio Cross Site Scripting vulnerability Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code … There are no reported fixed by versions.
GHSA-xrrh-h86w-pwfj
Aliases:
CVE-2023-38889
Alluxio vulnerable to arbitrary code execution An issue in Alluxio v.2.9.3 and before allows an attacker to execute arbitrary code … There are no reported fixed by versions.
This package is not known to fix any advisories.