com.hazelcast:hazelcast
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- Maven
- Vulnerability status
- affected by 7 advisory(ies)
Advisories (10)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-5gj6-62g7-vmgf Hazelcast vulnerable to unmasked password exposure | 4.0-BETA-1 – 4.2.8 ; 5.0-BETA-1 – < 5.0.5 ; 5.1-BETA-1 – < 5.1.6 ; … | Not affected |
| GHSA-6v25-8wq6-xq4j Hazelcast allows arbitrary member memory access by low-privileged client | 5.6.0 – < 5.7.0 ; 5.5.0 – < 5.7.0 ; < 5.7.0 | Affected |
| GHSA-8h4x-xvjp-vf99 Hazelcast Platform permission checking in CSV File Source connector | 5.3.0 – < 5.3.5 ; 5.2.0 – < 5.2.5 ; ≤ 5.1.7 | Affected |
| GHSA-99wh-973f-779p XML External Entity Reference in Hazelcast | 5.1-beta1 – < 5.1 | Not affected |
| GHSA-c5hg-mr8r-f6jp Hazelcast connection caching | < 3.12.13 ; 4.0 – 4.0.6 ; 4.1 – < 4.1.10 ; … | Affected |
| GHSA-c5vj-wp4v-mmvx Hazelcast Executor Services don't check client permissions properly | 5.2.0 – < 5.2.4 ; 5.1.0 – < 5.1.7 ; < 5.0.5 | Affected |
| GHSA-jv65-pf7v-f7p8 Deserialization of Untrusted Data in Hazelcast | < 3.11 | Affected |
| GHSA-v57x-gxfj-484q Security Advisory for "Log4Shell" | 5.0 – < 5.0.2 ; 4.0.0 – < 4.0.5 ; 4.1.1 – < 4.1.8 ; … | Not affected |
| GHSA-w294-6q5q-53p8 Hazelcast has an authorization bypass in IMap Predicates API | 5.6.0 – < 5.7.0 ; 5.5.0 – < 5.7.0 ; < 5.7.0 | Affected |
| GHSA-xh6m-7cr7-xx66 Missing permission checks on Hazelcast client protocol | ≤ 4.1.10 ; 4.2 – 4.2.8 ; 5.0 – 5.0.5 ; … | Affected |
Sources
| Source | Licence |
|---|