Skip to content
OpenAdvisories
High DLA-3209-1 1 CVE

ini4j - security update

Published Nov 28, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 ini4j 0.5.4-1~deb10u1

Vulnerabilities 1

  • High 7.5
    CVE-2022-41404 Public exploit

    org.ini4j allows attackers to cause a Denial of Service (DoS)

    An issue in the fetch() method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

    druid org.ini4j:ini4j ini4j ini4j Debian Ubuntu Wolfi Maven