JodaOrg/joda-time

JodaOrg/joda-time

GitHubGitHub
GitHubgithub.com
www.joda.orgwww.joda.org
Releases87
Frequency3 months 2 days
Last Release
Stars4.98K
Joda-Time is the widely used replacement for the Java date and time classes prior to Java SE 8.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-23080↗
9.1 CRITICAL—

Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.