nuget package report

Is com.xuxueli:xxl-rpc-core safe?

1 known vulnerability, worst severity CRITICAL.

cvss

9.8

how bad it is if exploited, out of 10

epss

1.0%

chance of exploitation in the next 30 days

xyz score

4.0

CyberXYZ composite, out of 10

fig. 01 — GHSA-c29g-q3h3-mwcf, the advisory selected below

// advisories

GHSA-c29g-q3h3-mwcf

CRITICALCVE-2023-33496

xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode.

Affected: <= 1.7.0
Fixed in: not stated
Published: 2023-06-07
Source: github

GHSA NVD MITRE reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so nuget packages are not covered.

Checked 2026-09-22 at 01:56 UTC. The most recent advisory here was published 2023-06-07. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is com.xuxueli:xxl-rpc-core safe? nuget package security report | CyberXYZ