CVE-2020-7622
1 advisory.
Maven/io.jooby:jooby-netty CVE-2020-7622: critical 9.8
Improper Neutralization of CRLF Sequences in HTTP Headers in Jooby ('HTTP Response Splitting)
Action: Upgrade io.jooby:jooby-netty to 2.2.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.1 | - |
Fixed versions
| 2.2.1 |
Sources
- osv: GHSA-gv3v-92v6-m48j
- https://github.com/jooby-project/jooby/security/advisories/GHSA-gv3v-92v6-m48j
- https://nvd.nist.gov/vuln/detail/CVE-2020-7622
- https://github.com/jooby-project/jooby/commit/b66e3342cf95205324023cfdf2cb5811e8a6dcf4
- https://snyk.io/vuln/SNYK-JAVA-IOJOOBY-564249
CVE-2020-7622 · published · modified · JSON