br.net.woodstock.rockframework:rockframework-domain (>=1.2.4, <=3.0.1), br.net.woodstock.rockframework:rockframework-persistence (>=2.0.0, <=2.0.8) +23 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.0.6.release)

org.springframework.security:spring-security-core MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.11), ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7) +2380 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (>=4.0.0.release, <=4.2.15.release)

org.springframework.security:spring-security-core MAVEN version =4.0.0.release, =0.1.8, =0.1.6, =0.1.4-sb1x, =1.0.0, =1.0.0, =1.0.0, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 and more Source cves: CVE-2020-5408 Source advisory: OSV:GHSA-2PPP-9496-P...

com.github.jackpanz:maccloud-core (>=2.4.7, <=2.4.8), com.gwtincubator:gwt-incubator-security (1.0.1) +74 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (2.0.4)

org.springframework.security:spring-security-core MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.jackpanz:maccloud-core =2.4.7, =1.1-1, =1.1-2 -...

com.github.dblock.waffle:waffle-spring-security2 (>=1.5, <=1.6), com.microsoftopentechnologies:azure-slave (>=0.1.0, <=0.3.0) +201 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (2.0.7.release)

org.springframework.security:spring-security-core MAVEN version 2.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security2 =1.5...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +15 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.0.2.release)

org.springframework.security:spring-security-core MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...

com.force.sdk:force-springsecurity (>=22.0.2-beta, <=22.0.9-beta), com.logitags:cibet (>=1.1, <=1.9) +24 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.0.3.release)

org.springframework.security:spring-security-core MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.force.sdk:force-springsecurity =22.0.2-beta, =1.1...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.2, <=0.1.6) +1973 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (>=5.1.0.release, <=5.1.9.release)

org.springframework.security:spring-security-core MAVEN version =5.1.0.release, =4.4.0.0, =0.1.2, =0.5.0, =0.5.21 - am.ik.servicebroker:cloud-karafka-service-broker 0.1.0 - au.net.causal.shoelaces:shoelaces-apphome-integration-tests-common 2.0 -...

com.buession.cas:buession-cas-core (>=1.1.1, <=1.1.2), com.buession.cas:buession-cas-metrics (>=1.1.1, <=1.1.2) +525 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (>=5.3.0.release, <=5.3.1.release)

org.springframework.security:spring-security-core MAVEN version =5.3.0.release, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.0.0, =5.15.0, =5.16.0 and more Source cves: CVE-2020-5408 Source advisory: OSV:GHSA-2PPP-9496-P23Q...

org.springframework.security:spring-security-acl (2.0.0), org.springframework.security:spring-security-adapters (2.0.0) +18 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (2.0.0)

org.springframework.security:spring-security-core MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.springframework.security:spring-security-acl 2.0.0 -...

org.springframework.security:spring-security-acl (2.0.2), org.springframework.security:spring-security-adapters (2.0.2) +18 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (2.0.2)

org.springframework.security:spring-security-core MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.springframework.security:spring-security-acl 2.0.2 -...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), com.keyholesoftware:khs-sherpa-spring (>=1.2.0, <=1.2.1) +15 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.0.0.release)

org.springframework.security:spring-security-core MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain...

org.jasig.cas:cas-server-webapp (>=3.4-rc1, <=3.4.3), org.springframework.security:spring-security-acl (3.0.1.release) +13 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.0.1.release)

org.springframework.security:spring-security-core MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.jasig.cas:cas-server-webapp =3.4-rc1, =3.4.3 -...

fr.xebia.springframework:xebia-spring-security-extras (>=1.1.4, <=1.1.6), org.appfuse.archetypes:appfuse-archetypes (2.1.0-m2) +53 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.0.4.release)

org.springframework.security:spring-security-core MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - fr.xebia.springframework:xebia-spring-security-extras...

com.github.cwilper.fcrepo-cloudsync:fcrepo-cloudsync-service (>=1.0.0-beta-1, <=1.0.0), com.github.lltyk:tapestry-spring-security (>=3.0.2, <=3.0.3) +199 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.0.5.release)

org.springframework.security:spring-security-core MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: -...

org.codehaus.enunciate:enunciate-spring-security-rt (>=1.20, <=1.22), org.codehaus.spring-security-oauth:spring-security-oauth (>=2.4, <=3.19) +20 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (2.0.3)

org.springframework.security:spring-security-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.codehaus.enunciate:enunciate-spring-security-rt =1.20,...

com.myjeeva:spring-extensions (>=1.0.0, <=1.0.1), org.springframework.security:spring-security-acl (2.0.6.release) +6 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (2.0.6.release)

org.springframework.security:spring-security-core MAVEN version 2.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.myjeeva:spring-extensions =1.0.0, =1.0.1 -...

com.github.dblock.waffle:waffle-spring-security2 (>=1.7, <=1.7.5), com.googlecode.cedar-common:cedar-common-gae (>=2.1.3, <=5.8.4) +12 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (2.0.8.release)

org.springframework.security:spring-security-core MAVEN version 2.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security2 =1.7...

com.arsframework:ars-module-cms (>=1.0.0, <=1.1.4), com.arsframework:ars-module-educate (>=1.0.0, <=1.1.0) +186 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.1.3.release)

org.springframework.security:spring-security-core MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.arsframework:ars-module-cms =1.0.0, =1.0.0, =1.0....

com.allanditzel:spring-security-csrf-token-filter (1.1), com.btmatthews.atlas:atlas-jcr (1.0.1) +140 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.2.0.release)

org.springframework.security:spring-security-core MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1...

com.aerse:gcless (11.2), com.aerse:spring-security-taglib (1.1) +107 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.2.1.release)

org.springframework.security:spring-security-core MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.aerse:gcless 11.2 -...