Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.infinispan/infinispan-client-hotrod@9.1.7.Final
purl pkg:maven/org.infinispan/infinispan-client-hotrod@9.1.7.Final
Next non-vulnerable version 14.0.25.Final
Latest non-vulnerable version 15.0.0.Dev07
Risk score 2.3
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2018-1131

Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated … There are no reported fixed by versions.
GHSA-gg57-587f-h5v6
Aliases:
CVE-2023-5384
Infinispan caches credentials in clear text A flaw was found in Infinispan. When serializing the configuration for a cache to …
14.0.25.Final
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2017-15089
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the …