# \#cve

**URL:** https://discuss.aerospike.com/tag/cve/140.md

[Latest](https://discuss.aerospike.com/latest.md) · [Categories](https://discuss.aerospike.com/categories.md) · [Tags](https://discuss.aerospike.com/tags.md)

---

## [CVE-2023-36480 - Aerospike Java Client vulnerable to unsafe deserialization of server responses](https://discuss.aerospike.com/t/cve-2023-36480-aerospike-java-client-vulnerable-to-unsafe-deserialization-of-server-responses/10391)

<div class="topic-metadata">

**Author:** [@rbotzer](https://discuss.aerospike.com/u/rbotzer)\
**Replies:** 1\
**Last updated:** [August 8, 2023, 2:30am UTC](https://discuss.aerospike.com/t/cve-2023-36480-aerospike-java-client-vulnerable-to-unsafe-deserialization-of-server-responses/10391 "2023-08-08T02:30:49Z")

</div>

On August 4th, 2023, GitHub published CVE-2023-36480, a high severity vulnerability in our Aerospike Java client. GitHub Security Lab had previously notified us that the client is vulnerable to CWE-502. Upon confirming a…

---

## [CVE-2022-22965 Spring4Shell RCE analysis](https://discuss.aerospike.com/t/cve-2022-22965-spring4shell-rce-analysis/9310)

<div class="topic-metadata">

**Author:** [@rbotzer](https://discuss.aerospike.com/u/rbotzer)\
**Replies:** 1\
**Last updated:** [April 3, 2022, 5:17pm UTC](https://discuss.aerospike.com/t/cve-2022-22965-spring4shell-rce-analysis/9310 "2022-04-03T17:17:52Z")

</div>

The Spring Project has announced a zero day vulnerability in the Spring Framework on March 31st 2022, CVE-2022-22965. The announcement on the Spring Blog makes it seem very unlikely that any Aerospike products are expose…

---

## [CVE-2021-44228: Log4Shell vulnerability and Aerospike](https://discuss.aerospike.com/t/cve-2021-44228-log4shell-vulnerability-and-aerospike/9072)

<div class="topic-metadata">

**Author:** [@rbotzer](https://discuss.aerospike.com/u/rbotzer)\
**Replies:** 6\
**Last updated:** [January 6, 2022, 3:23am UTC](https://discuss.aerospike.com/t/cve-2021-44228-log4shell-vulnerability-and-aerospike/9072 "2022-01-06T03:23:31Z")

</div>

On December 9th 2021, a high severity vulnerability in Log4j 2 was published as CVE-2021-44228, AKA Log4Shell. Any JVM-based project using log4j-core with a version \< 2.17.0 is affected. See this Cloudflare blog post for…