Skip to content
OpenAdvisories

Package · Maven

org.noear:solon

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2023-48967

    Solon is vulnerable to Deserialization of Untrusted Data

    Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data.

    org.noear:solon Maven
  • Critical 9.8
    CVE-2023-35839

    Solon vulnerable to deserialization of untrusted data

    A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.

    org.noear:solon Maven