VulnerableCode.io
Packages Vulnerabilities Documentation
Pipeline Schedule API
About
VulnerableCode is a free and open database of software package vulnerabilities.
  • Live chat at https://gitter.im/aboutcode-org/vulnerablecode
  • Source code and support at https://github.com/nexB/vulnerablecode
  • Docs at https://vulnerablecode.readthedocs.org/
  • Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/
v36.1.3
Vulnerable and Fixing Package details for Vulnerability: VCID-xq9h-49vw-aaaa
Affected Fixed by
pkg:maven/org.apache.santuario/xmlsec@2-alpha0 pkg:maven/org.apache.santuario/xmlsec@2.0.3
pkg:maven/org.apache.santuario/xmlsec@2.0.0-beta pkg:maven/org.apache.santuario/xmlsec@2.0.3
pkg:maven/org.apache.santuario/xmlsec@2.0.0-rc1 pkg:maven/org.apache.santuario/xmlsec@2.0.3
pkg:maven/org.apache.santuario/xmlsec@2.0.0 pkg:maven/org.apache.santuario/xmlsec@2.0.3
pkg:maven/org.apache.santuario/xmlsec@2.0.1 pkg:maven/org.apache.santuario/xmlsec@2.0.3
pkg:maven/org.apache.santuario/xmlsec@2.0.2 pkg:maven/org.apache.santuario/xmlsec@2.0.3

VulnerableCode is free software by nexB Inc. and others | Source code license: Apache-2.0 | Data license: CC-BY-SA-4.0 | Terms of Service