Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.qpid/proton-j@0.12.0
purl pkg:maven/org.apache.qpid/proton-j@0.12.0
Next non-vulnerable version 0.30.0
Latest non-vulnerable version 0.33.8
Risk score 3.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2018-17187

The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. …
0.30.0
Not vulnerable
0.31.0
Not vulnerable
0.32.0
Not vulnerable
0.33.0
Not vulnerable
0.33.1
Not vulnerable
0.33.2
Not vulnerable
0.33.3
Not vulnerable
0.33.4
Not vulnerable
0.33.5
Not vulnerable
0.33.6
Not vulnerable
0.33.8
Not vulnerable
GHSA-5h6x-m52p-23ph
Aliases:
CVE-2019-0223
Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton ## Withdrawn Advisory This advisory has been withdrawn because the vulnerability …
0.27.1
Vulnerable
GHSA-f5cf-f7px-xpmh
Aliases:
CVE-2016-2166
Moderate severity vulnerability that affects org.apache.qpid:proton-j The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before …
0.12.1
Vulnerable
0.12.1
Vulnerable
GHSA-xvch-r4wf-h8w9
Aliases:
CVE-2018-17187
Improper Certificate Validation in proton-j The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by …
0.30.0
Not vulnerable
0.30.0
Not vulnerable
0.30.0
Not vulnerable
This package is not known to fix any advisories.