quartz
Quartz Enterprise Job Scheduler
84%
Total Score
80
100
100
75
100
Health Score Breakdown
Only two commits were recorded in the last three months, indicating modest recent source activity despite the recent release history.
Recent activity includes two new issues, one closed issue, and six new pull requests, although no pull requests were merged in the month measured; this is mixed but not evidence of abandonment.
No repository security policy was found, leaving vulnerability-reporting expectations and response guidance undocumented.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10446 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. quartz is vulnerable to Remote Code Execution (RCE) in versions 2.1.4 - 2.3.2. | 2.1.4 - 2.3.2 | Medium |
CVE-2019-13990 org.quartz-scheduler:quartz is vulnerable to Improper Restriction of XML External Entity Reference in versions 0.0.0 - 2.3.2. | 0.0.0 - 2.3.2 | Critical |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.slf4j:slf4j-api Version 2.0.16 | — | — |
jakarta.xml.bind:jakarta.xml.bind-api Version 4.0.4 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.