Product

com.graphhopper/graphhopper-nav vulnerabilities

1 published CVE affecting com.graphhopper/graphhopper-nav, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest com.graphhopper/graphhopper-nav CVEs

Newest publication first

CVE-2021-29506 Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service.
Published 2021-05-13

MediumCVSS 6.5 EPSS 1.4%

GraphHopper is an open-source Java routing engine. In GrassHopper from version 2.0 and before version 2.4, there is a regular expression injection vulnerability that may lead to Denial of Service. This has been patched in 2.4 and 3.0 See this pull request for the fix: https://git...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

com.graphhopper/graphhopper-nav vulnerabilities

Latest com.graphhopper/graphhopper-nav CVEs

CVE-2021-29506 Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service.