Known vulnerabilities in Dropwizard

Vendor: Coda Hale
Software: Dropwizard
Software CPE: cpe:2.3:a:coda_hale:dropwizard:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Dropwizard Dropwizard is affected by 4 known vulnerabilities: 2 high, 2 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86808 - Resource exhaustion
CVE-2024-22201
CWE-400 Medium
No
No
3.0.7, 4.0.7 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU27022 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-11002
CWE-94 High
No
No
1.3.21, 2.0.3 20.04.2020 SB2020042006
#VU25726 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-5245
CWE-94 High
Available
No
1.3.19, 2.0.2 02.03.2020 SB2020030207
SB2022041931
SB2025112459
#VU25469 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8840
CWE-94 Medium
Available
No
1.3.20 19.02.2020 SB2020021921
SB2020022615
SB2020061106
and 18 more