How many CVEs have patched newResourceResponse?

2 published CVEs changed newResourceResponse in theonedev/onedev, in 6 distinct patches totalling 23 changed lines, between 2022 and 2024.

What is the latest CVE that changed newResourceResponse?

CVE-2024-45309, published 2024-10-21, changed lines 60 to 61 of server-core/src/main/java/io/onedev/server/web/resource/ArtifactResource.java.

How does newResourceResponse compare to the rest of theonedev/onedev?

theonedev/onedev has 16 CVEs with a located fix in total; 2 of them changed newResourceResponse.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

theonedev/onedev

Function

5 files

newResourceResponse

Name: newResourceResponse in theonedev/onedev: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Defined in 5 files

Last patched October 21, 2024

2

CVEs

That changed this function

6

Distinct patches

Backports counted once

23

Lines changed

Added plus removed

2022–2024

Years

By CVE publication date

Overview

newResourceResponse in theonedev/onedev was changed by 2 published CVE fixes between 2022 and 2024, in 6 distinct patches that added or removed 23 lines in total.

The name occurs in 5 files: server-core/src/main/java/io/onedev/server/web/resource/ArtifactResource.java, server-plugin/server-plugin-report-markdown/src/main/java/io/onedev/server/plugin/report/markdown/MarkdownReportDownloadResource.java, server-plugin/server-plugin-report-html/src/main/java/io/onedev/server/plugin/report/html/HtmlReportDownloadResource.java, server-core/src/main/java/io/onedev/server/web/resource/RawBlobResource.java, server-core/src/main/java/io/onedev/server/web/resource/SiteFileResource.java.

theonedev/onedev has 16 CVEs with a located fix in total, so 13% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed newResourceResponse, newest first, with the lines each fix touched.

CVE-2024-45309
CVE-2024-45309 · server-core/src/main/java/io/onedev/server/web/resource/ArtifactResource.java · lines 60–61 · +2 −0
High · CVSS 8.7
EPSS 24.5%2024-10-21
CVE-2024-45309
CVE-2024-45309 · server-core/src/main/java/io/onedev/server/web/resource/RawBlobResource.java · lines 66–67 · +2 −0
High · CVSS 8.7
EPSS 24.5%2024-10-21
CVE-2024-45309
CVE-2024-45309 · server-core/src/main/java/io/onedev/server/web/resource/SiteFileResource.java · lines 65–66 · +2 −0
High · CVSS 8.7
EPSS 24.5%2024-10-21
CVE-2024-45309
CVE-2024-45309 · server-plugin/server-plugin-report-html/src/main/java/io/onedev/server/plugin/report/html/HtmlReportDownloadResource.java · lines 52–63 · +4 −0 in 2 hunks
High · CVSS 8.7
EPSS 24.5%2024-10-21
CVE-2024-45309
CVE-2024-45309 · server-plugin/server-plugin-report-markdown/src/main/java/io/onedev/server/plugin/report/markdown/MarkdownReportDownloadResource.java · lines 60–70 · +4 −0 in 2 hunks
High · CVSS 8.7
EPSS 24.5%2024-10-21
CVE-2022-39207
CVE-2022-39207 · server-core/src/main/java/io/onedev/server/web/resource/ArtifactResource.java · lines 87–96 · +2 −7 in 2 hunks
Medium · CVSS 5.4
EPSS 1.0%2022-09-13

Get an alert when the next CVE fix lands in theonedev/onedev, with the patched functions.

Monitor onedev CVEs

Other functions in these files

Functions in the same files that CVE fixes also changed.

1writeDataserver-core/src/main/java/io/onedev/server/web/resource/SiteFileResource.java1 CVEs · 1 patches2024

Other hotspots in the repository

Functions in theonedev/onedev changed by the most CVE fixes.

initialValue2 CVEs · server-core/src/main/java/io/onedev/server/model/User.java respond2 CVEs · server-core/src/main/java/io/onedev/server/web/component/markdown/MarkdownEditor.java BuildReportPage1 CVEs · server-core/src/main/java/io/onedev/server/web/page/project/builds/detail/report/BuildReportPage.java ProjectBlobPage1 CVEs · server-core/src/main/java/io/onedev/server/web/page/project/blob/ProjectBlobPage.java CommitDetailPage1 CVEs · server-core/src/main/java/io/onedev/server/web/page/project/commits/CommitDetailPage.java

All patched functions in theonedev/onedev

Frequently asked questions

Common questions about CVE fixes to newResourceResponse.

How many CVEs have patched newResourceResponse?: 2 published CVEs changed newResourceResponse in theonedev/onedev, in 6 distinct patches totalling 23 changed lines, between 2022 and 2024.
What is the latest CVE that changed newResourceResponse?: CVE-2024-45309, published 2024-10-21, changed lines 60 to 61 of server-core/src/main/java/io/onedev/server/web/resource/ArtifactResource.java.
How does newResourceResponse compare to the rest of theonedev/onedev?: theonedev/onedev has 16 CVEs with a located fix in total; 2 of them changed newResourceResponse.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track theonedev/onedev CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing