org.openrefine.dependencies:butterfly
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE) | org.openrefine.dependencies:butterfly | Maven | Medium | Fix reported | |
| Butterfly has path/URL confusion in resource handling leading to multiple weaknesses | org.openrefine.dependencies:butterfly | Maven | Critical | Fix reported |