Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.cloud/spring-cloud-contract-shade@2.1.1.RELEASE
purl pkg:maven/org.springframework.cloud/spring-cloud-contract-shade@2.1.1.RELEASE
Next non-vulnerable version 2.1.4.RELEASE
Latest non-vulnerable version 4.1.1
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2018-10237

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.