CGA-7v36-x4w2-722q

Published

Last updated

https://images.chainguard.dev/security/CGA-7v36-x4w2-722q

Package

trino

Latest Update

Fixed

Fixed Version

440-r0

Aliases

Severity

5.3

Medium

CVSS V3

Summary

Cross-site scripting in Apache HttpClient

Description

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-7v36-x4w2-722q

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources