Maven/org.jitsi:dnssecjava: medium 6.5
DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mmwx-rj87-vfgr#Maven/org.jitsi:dnssecjava
- https://github.com/dnsjava/dnsjava/security/advisories/GHSA-mmwx-rj87-vfgr
- https://nvd.nist.gov/vuln/detail/CVE-2023-50868
- https://github.com/dnsjava/dnsjava/commit/711af79be3214f52daa5c846b95766dc0a075116
- https://github.com/advisories/GHSA-pv4h-p8jr-6cv2
- https://github.com/dnsjava/dnsjava
published · modified · JSON