Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.qpid/proton-j@0.27.1
purl pkg:maven/org.apache.qpid/proton-j@0.27.1
Next non-vulnerable version 0.30.0
Latest non-vulnerable version 0.33.8
Risk score 3.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2018-17187

The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. …
0.30.0
Not vulnerable
0.31.0
Not vulnerable
0.32.0
Not vulnerable
0.33.0
Not vulnerable
0.33.1
Not vulnerable
0.33.2
Not vulnerable
0.33.3
Not vulnerable
0.33.4
Not vulnerable
0.33.5
Not vulnerable
0.33.6
Not vulnerable
0.33.8
Not vulnerable
GHSA-xvch-r4wf-h8w9
Aliases:
CVE-2018-17187
Improper Certificate Validation in proton-j The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by …
0.30.0
Not vulnerable
0.30.0
Not vulnerable
0.30.0
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-5h6x-m52p-23ph
Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton ## Withdrawn Advisory This advisory has been withdrawn because the vulnerability … CVE-2019-0223