net.kieker-monitoring:analysis (>=2.0.0, <=2.0.2), net.kieker-monitoring:monitoring-aspectj (>=2.0.0, <=2.0.2) +6 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.2.1)

com.rabbitmq:amqp-client MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.kieker-monitoring:analysis =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.20.0, =2.20.0, =2.20.4 -...

net.kieker-monitoring:analysis (>=2.0.0, <=2.0.2), net.kieker-monitoring:monitoring-aspectj (>=2.0.0, <=2.0.2) +6 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.2.1)

com.rabbitmq:amqp-client MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.kieker-monitoring:analysis =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.20.0, =2.20.0, =2.20.4 -...

net.kieker-monitoring:analysis (>=2.0.0, <=2.0.2), net.kieker-monitoring:monitoring-aspectj (>=2.0.0, <=2.0.2) +6 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (4.2.1)

com.rabbitmq:amqp-client MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.kieker-monitoring:analysis =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.20.0, =2.20.0, =2.20.4 -...

com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +20 more potentially affected by CVE-2026-43827 via org.apache.shiro:shiro-core (3.0.0-alpha-1)

org.apache.shiro:shiro-core MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...

com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +20 more potentially affected by CVE-2026-44598 via org.apache.shiro:shiro-core (3.0.0-alpha-1)

org.apache.shiro:shiro-core MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...

com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +20 more potentially affected by CVE-2026-43828 via org.apache.shiro:shiro-core (3.0.0-alpha-1)

org.apache.shiro:shiro-core MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...

cn.easyproject:easyshiro (>=2.3.0-release, <=2.5.1-release), com.easycodebox:easycode-login (>=0.1.0, <=0.2.2) +172 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.2.5)

org.apache.shiro:shiro-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - cn.easyproject:easyshiro =2.3.0-release, =0.1.0, =1.0.1-release, =0.1.3, =0.1.3, =2.17.3, =2.17.7 -...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in spring-security-core-6.4.5.jar (CVE-2025-41232)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2025-41232 in spring-security-core-6.4.5.jar. Vulnerability Details CVEID:CVE-2025-41232 DESCRIPTION: Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an...

EUVD-2025-25712

Malicious code in bioql PyPI...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-security-core-6.4.5.jar

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of spring-security-core-6.4.5.jar Vulnerability Details CVEID:CVE-2025-41232 DESCRIPTION: Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an authorization bypass...

GHSA-9PP5-9C7G-4R83 Spring Security authorization bypass for method security annotations on private methods

Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an authorization bypass. Your application may be affected by this if the following are true: You are using @EnableMethodSecuritymode=ASPECTJ and spring-security-aspects, and You have...

CVE-2025-41232

Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an authorization bypass. Your application may be affected by this if the following are true: You are using @EnableMethodSecuritymode=ASPECTJ and spring-security-aspects, and You have...

CVE-2025-41232

Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an authorization bypass. Your application may be affected by this if the following are true: You are using @EnableMethodSecuritymode=ASPECTJ and spring-security-aspects, and You have...

CVE-2025-41232: Protection Mechanism Failure

Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an authorization bypass. Your application may be affected by this if the following are true: You are using @EnableMethodSecuritymode=ASPECTJ and spring-security-aspects, and You have...

Missing Authentication for Critical Function

Overview org.springframework.security:spring-security-core is a package that provides security services for the Spring IO Platform. Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to improperly locating method security annotations on private...

cloud.opencode.base:opencode-base-token (1.0.0), com.gitee.jmash:jmash-captcha-service (0.0.1) +20 more potentially affected by CVE-2023-46749 via org.apache.shiro:shiro-core (>=2.0.0-alpha-1, <=2.0.0-alpha-3)

org.apache.shiro:shiro-core MAVEN version =2.0.0-alpha-1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-3 and more Source cves: CVE-2023-46749 Source advisory: GHSA-JC7H-C423-MPJC...

aspectj:ASTFuzzer: Security exception in org.aspectj.org.eclipse.jdt.internal.compiler.ast.OperatorExpression.printExpres

Detailed Report: https://oss-fuzz.com/testcase?key=6281331080036352 Project: aspectj Fuzzing Engine: libFuzzer Fuzz Target: ASTFuzzer Job Type: libfuzzerasanaspectj Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

aspectj:ASTFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseMaybeParenthesizedFieldSignatureP

Detailed Report: https://oss-fuzz.com/testcase?key=6750118671679488 Project: aspectj Fuzzing Engine: libFuzzer Fuzz Target: ASTFuzzer Job Type: libfuzzerasanaspectj Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

aspectj:ASTFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseAtomicTypePattern

Detailed Report: https://oss-fuzz.com/testcase?key=6671975383433216 Project: aspectj Fuzzing Engine: libFuzzer Fuzz Target: ASTFuzzer Job Type: libfuzzerasanaspectj Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

aspectj:ASTFuzzer: Security exception in org.aspectj.org.eclipse.jdt.internal.compiler.parser.RecoveredAnnotation.updateF

Detailed Report: https://oss-fuzz.com/testcase?key=5623818656022528 Project: aspectj Fuzzing Engine: libFuzzer Fuzz Target: ASTFuzzer Job Type: libfuzzerasanaspectj Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...