Description
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache ShenYu (incubating) | Apache ShenYu (incubating) – < 2.4.2 | 2.4.2 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.shenyu:shenyu-common | >= 2.4.0, < 2.4.2 | 2.4.2 | GHSA-7wq4-89xx-g62j |