Maven/dnsjava:dnsjava: medium 6.5
DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources
Action: Upgrade dnsjava:dnsjava to 3.6.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.5.0 | 3.6.0 | - |
Fixed versions
| 3.6.0 |
Sources
- osv: GHSA-mmwx-rj87-vfgr
- https://github.com/dnsjava/dnsjava/security/advisories/GHSA-mmwx-rj87-vfgr
- https://nvd.nist.gov/vuln/detail/CVE-2023-50868
- https://github.com/dnsjava/dnsjava/commit/711af79be3214f52daa5c846b95766dc0a075116
- https://github.com/advisories/GHSA-pv4h-p8jr-6cv2
- https://github.com/dnsjava/dnsjava
published · modified · JSON