Critical DLA-274-1 1 CVE

groovy - security update

Published Jul 18, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	groovy	1.7.0-4+deb6u1

Vulnerabilities 1

Critical 9.8

CVE-2015-3253 EPSS 41%

Improper Neutralization of Special Elements in Output Used by a Downstream Component in Apache Groovy

The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.

org.codehaus.groovy:groovy-all groovy groovy org.codehaus.groovy:groovy Debian Ubuntu Maven

Aug 13, 2015