-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jboss.xnio:xnio-all | maven | <= 3.8.7.Final |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the use of e.printStackTrace() in notifyReadClosed, which bypasses proper logging mechanisms. The commit explicitly replaces this with a controlled logger (log.error()), confirming the vulnerability was in this method. While notifyWriteClosed was also patched, the CVE title and descriptions specifically reference notifyReadClosed as the primary vector. The direct connection between the vulnerability description, CWE-770 (resource allocation without throttling), and the patch confirms high confidence.
Ongoing coverage of React2Shell