Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.cloud/spring-cloud-contract-shade@2.0.1.RELEASE
purl pkg:maven/org.springframework.cloud/spring-cloud-contract-shade@2.0.1.RELEASE
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2013-4366
http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have …
CVE-2011-1498
Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to …
CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.