org.grails:grails-databinding (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.grails:grails-databinding, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2022-35912 — CVSS 9.8 (critical): In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8…
• CVE-2023-46131 — CVSS 6.5 (medium): Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a…