Maven/org.jitsi:dnssecjava: medium 6.5
DNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-crjg-w57m-rqqf#Maven/org.jitsi:dnssecjava
- https://github.com/dnsjava/dnsjava/security/advisories/GHSA-crjg-w57m-rqqf
- https://nvd.nist.gov/vuln/detail/CVE-2023-50387
- https://github.com/dnsjava/dnsjava/commit/07ac36a11578cc1bce0cd8ddf2fe568f062aee78
- https://github.com/dnsjava/dnsjava/commit/3ddc45ce8cdb5c2274e10b7401416f497694e1cf
- https://github.com/advisories/GHSA-8459-gg55-8qjj
- https://github.com/dnsjava/dnsjava
published · modified · JSON