GR
Product
Groovy
by Apache · last CVE Dec 7, 2020
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch

Add Groovy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-6814
9.8
17%
Jan 18
When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g
Affected: 1.7.0 through 2.4.3; 2.4.4 through 2.4.7
CVE-2015-3253
9.8
41%
Aug 13
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a…
Affected: 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.1; +34 more
CVE-2020-17521
5.5
1%
Dec 7
Apache Groovy provides extension methods to aid with creating temporary directories
Affected: 2.0.0 through 2.4.20; 2.5.0 through 2.5.13; 3.0.0 through 3.0.6; 4.0.0
Showing 3