Skip to content

Known vulnerabilities in Apache Software Foundation Apache ShenYu (incubating)

Is your version affected?

CVE Summary Score Published
CVE-2022-26650 In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(),… Not rated May 17, 2022
CVE-2022-23945 Missing authentication on ShenYu Admin when register by HTTP Not rated Jan 25, 2022
CVE-2022-23944 User can access /plugin api without authentication Not rated Jan 25, 2022
CVE-2022-23223 On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users Not rated Jan 25, 2022
CVE-2021-45029 Groovy Code Injection & SpEL Injection which lead to Remote Code Execution Not rated Jan 25, 2022

Other Apache Software Foundation products