Marc Lafon

CVE-2022-41854 impacting snakeyaml 1.29

2

Hi, thanks for this great editor, I know that in the context of a text editor, this problem may be ignored but just for information there is a vulnerability declared...

BASIC Authentication scheme assume that crdential are encoded with ISO-8859-1

5

I do not know if this is a deliberated choice or not, but we have discovered that the BASIC Authenticate HTTP header is decoded with the ISO-8859-1 charset avoiding the...

WriteTimeoutHandler throw an IllegalStateException

4

For a reason I can not explain, the com.unboundid.ldap.sdk.WriteTimeoutHandler try to schedule a task on a cancelled Timer: > Caused by: java.lang.IllegalStateException: Timer already cancelled. > at java.util.Timer.sched(Timer.java:397) > at...