| Package | Affected versions | Patched versions |
|---|---|---|
| reactor core | ≥ 3.5.0, < 3.7.20≥ 3.8.0, < 3.8.6.1< 3.4.42 | 3.7.203.8.6.13.4.42 |
In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.5.0 - 3.7.19 Reactor Core 3.4.41 and earlier
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free