Skip to content
OpenAdvisories

Package · Maven

com.alibaba.nacos:nacos-spring-context

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-39106

    Nacos Spring vulnerable to Unsafe Deserialization

    An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor() component.

    com.alibaba.nacos:nacos-spring-context Maven