GHSA-65hj-9ppw-77xc
ff4j is vulnerable to Remote Code Execution (RCE)
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.ff4j:ff4j-core | >= 1.8.1, < 1.9 | 1.9 |
Details
As written in the advisory (Markdown source, shown as plain text).
ff4j 1.8.1 is vulnerable to Remote Code Execution (RCE). This issue has been patched in version 1.9.
References
External links from the advisory. They lead to third-party sites.