org.jgroups:jgroups (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.jgroups:jgroups, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2016-2141 — CVSS 9.8 (critical): It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker…
• CVE-2013-4112 — CVSS 5.4 (medium): The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive…