com.mchange:c3p0
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property | com.mchange:c3p0Red Hat Fuse 7/c3p0/c3p0 | MavenRed Hat | High | Fix reported | |
| c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets | com.mchange:c3p0Red Hat Fuse 7/c3p0 | MavenRed Hat | Medium | Fix reported | |
| XML External Entity Reference in mchange:c3p0 | com.mchange:c3p0Red Hat BPM Suite 6/c3p0 | MavenRed Hat | Critical | Fix reported | |
| Billion laughs attack in c3p0 | com.mchange:c3p0Red Hat BPM Suite 6/c3p0 | MavenRed Hat | High | Fix reported |