Maven/org.apache.mesos:mesos CVE-2018-1330: high 7.5, EPSS 3.74%
Crash when decoding malformed HTTP requests or malformed JSON payload
Action: Upgrade org.apache.mesos:mesos to 1.6.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.6.0 | - |
Fixed versions
| 1.6.0 |
Sources
- osv: GHSA-95q3-pppp-r683
- https://nvd.nist.gov/vuln/detail/CVE-2018-1330
- https://lists.apache.org/thread.html/395cb6bcf367702acd1e580a1f39b56cdd7a5953d0368b4c1adb1dde@<dev.mesos.apache.org>
CVE-2018-1330 · published · modified · JSON