1. Home
  2. Packages
  3. maven
  4. org.apache.rocketmq
  5. rocketmq-namesrv

pkg:maven/org.apache.rocketmq/rocketmq-namesrv

Type maven
Namespace org.apache.rocketmq
Name rocketmq-namesrv

Known advisories, vulnerabilities and fixes for org.apache.rocketmq/rocketmq-namesrv package.

Repository
https://mvnrepository.com/artifact/org.apache.rocketmq/rocketmq-namesrv
Critical 2
Type Version Distribution # CVEs # Advisory ID Title Severity Published
Affected >= 5.0.0, < 5.1.2 < 4.9.7 CVE-2023-37582
maven MAVEN:GHSA-GPQ8-963W-8QC9 RocketMQ NameServer component Code Injection vulnerability critical 2023-07-12T12:31:36
(14 months ago)
Fixed = 5.1.2 = 4.9.7 CVE-2023-37582
maven MAVEN:GHSA-GPQ8-963W-8QC9 RocketMQ NameServer component Code Injection vulnerability critical 2023-07-12T12:31:36
(14 months ago)
Affected >= 5.0.0, < 5.1.1 >= 4.0.0, < 4.9.6 CVE-2023-33246
maven MAVEN:GHSA-X3CQ-8F32-5F63 Apache RocketMQ may have remote code execution vulnerability when using update configuration function critical 2023-07-06T21:15:04
(14 months ago)
Fixed = 5.1.1 = 4.9.6 CVE-2023-33246
maven MAVEN:GHSA-X3CQ-8F32-5F63 Apache RocketMQ may have remote code execution vulnerability when using update configuration function critical 2023-07-06T21:15:04
(14 months ago)