Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

Maven package

com.erudika:para-core

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 5.3MavenPublished

    Business Logic Errors in Para

    CVE-2022-1848 · GHSA-4793-8wwh-jxxr

    Affected
    • Maven com.erudika:para-core < 1.46.0
    Fixed in
    1.46.0· Vendor fix available
    Issue
    Paraara prior to version 1.46.0 is vulnerable to business logic errors. A user can create more than one app, even after they reach the app limit.

    Recommended action: Upgrade to 1.46.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →
  2. Critical, CVSS 9.4MavenPublished

    Cross-site Scripting in com.erudika:para-core

    CVE-2022-1782 · GHSA-phvw-r25p-8xv7

    Affected
    • Maven com.erudika:para-core < 1.45.11
    Fixed in
    1.45.11· Vendor fix available
    Issue
    Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.

    Recommended action: Upgrade to 1.45.11 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →