Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.qpid/proton-j@0.12.1
purl pkg:maven/org.apache.qpid/proton-j@0.12.1
Next non-vulnerable version 0.30.0
Latest non-vulnerable version 0.33.8
Risk score 3.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-5h6x-m52p-23ph
Aliases:
CVE-2019-0223
Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton ## Withdrawn Advisory This advisory has been withdrawn because the vulnerability …
0.27.1
Vulnerable
GHSA-xvch-r4wf-h8w9
Aliases:
CVE-2018-17187
Improper Certificate Validation in proton-j The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by …
0.30.0
Not vulnerable
0.30.0
Not vulnerable
0.30.0
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-f5cf-f7px-xpmh
Moderate severity vulnerability that affects org.apache.qpid:proton-j The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before … CVE-2016-2166