ChocolateyReleases37
Frequency4 months 2 weeks
Last Release
Clojure is a dynamic programming language that targets the Java Virtual Machine.
**NOTE**: This package is automatically updated. If it is out of date and there is no newer package submitted, please use the `Contact Maintainers` functionality to alert them.
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| >= 1.2.0, < 1.11.2, = 1.12.0 | 7.5 HIGH | — | ||
An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service (DoS) via the clojure.core$partial$fn__5920 function. | ||||
| < 1.9.0 | 9.8 CRITICAL | — | ||
In Clojure before 1.9.0, classes can be used to construct a serialized object that executes arbitrary code upon deserialization. This is relevant if a server deserializes untrusted objects. | ||||