org.owasp.esapi:esapi
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Cross-site Scripting in org.owasp.esapi:esapi | org.owasp.esapi:esapi | Maven | Medium | Fix reported | |
| Path traversal in the OWASP Enterprise Security API | org.owasp.esapi:esapi | Maven | High | Fix reported | |
| DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998 | org.owasp.esapi:esapi | Maven | High | Fix reported | |
| Missing Cryptographic Step in OWASP Enterprise Security API for Java | org.owasp.esapi:esapi | Maven | Medium | Fix reported | |
| Missing Cryptographic Step in OWASP Enterprise Security API for Java | org.owasp.esapi:esapi | Maven | Low | Fix reported | |
| Validator.isValidSafeHTML is being deprecated and will be deleted from org.owasp.esapi:esapi in 1 year | org.owasp.esapi:esapi | Maven | Medium | Fix reported | |
| Padding oracle attacks | org.owasp.esapi:esapi | Maven | Medium | Fix reported |