CVE-2021-28099
1 advisory.
Maven/com.netflix.hollow:hollow CVE-2021-28099: medium 4.4
Insecure temporary file in Netflix OSS Hollow
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 6.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9295-mhf3-v33m
- https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-j83w-7qr9-wv86
- https://nvd.nist.gov/vuln/detail/CVE-2021-28099
- https://github.com/Netflix/hollow/issues/502
- https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2021-001.md
CVE-2021-28099 · published · modified · JSON