ROOT-APP-MAVEN-CVE-2022-22970 CVE-2022-22970 in org.springframework:spring-beans - Patched by Root

Root has patched CVE-2022-22970 in the org.springframework:spring-beans package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-22965 CVE-2022-22965 in org.springframework:spring-beans - Patched by Root

Root has patched CVE-2022-22965 in the org.springframework:spring-beans package for Root:Maven. Multiple fixed versions available...

jsonorg-tp1

json.org CVE-2022-45688 true positive The project illustrates CVE-2022-45688 in json.org -- there is a simple application XML2JSONConverter to read XML from input, convert it to JSON and pretty-print it to the console. Using malicious input, the application crashes with a stackoverflow. The test...

cve-2021-21985_exp

cve-2021-21985 exploit 0x01 Vulnerability Point Analysis available at: https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985?referrer=homerapid7-analysis 0x02 exploit Reconstruct the beans object to achieve RCE. Bean list: localizedMessageBundle vsanWorkerThreadFactory vsanThreadPoolImpl...

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' via the determineKey function in the camel-aws2-s3 component. An attacker who can upload objects to a bucket consumed b...

RHLW-2026-A5EC8923604C1851 Lightwell Security Advisory: spring-beans 5.3.18.rhlw-00010

Red Hat Lightwell has released org.springframework:spring-beans 5.3.18.rhlw-00010 with a backported security fix. CVE-2022-22970: In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely o...

io.zipkin.zipkin2:zipkin-collector-rabbitmq (>=2.14.1, <=2.14.2), org.apache.zipkin.reporter2:zipkin-reporter-spring-beans (2.8.3) +2 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.11.0)

com.rabbitmq:amqp-client MAVEN version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.zipkin2:zipkin-collector-rabbitmq =2.14.1, =2.14.2 -...

com.smoketurner.dropwizard:zipkin-core (>=1.3.8-1, <=1.3.9-1), io.dropwizard.metrics:metrics-graphite (4.1.0-rc3) +5 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.9.1)

com.rabbitmq:amqp-client MAVEN version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.8-1, =2.0.0-rc0+test8, =2.11.9, =2.7.12, =2.7.12, =2.11.9, =2.12.0...

com.meltwater:rxrabbit (1.3.0), com.rabbitmq.jms:rabbitmq-jms (>=1.8.0, <=1.8.1) +6 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.3.0)

com.rabbitmq:amqp-client MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.meltwater:rxrabbit 1.3.0 - com.rabbitmq.jms:rabbitmq-jms =1.8.0, =2.2.2, =2.2.2, =2.2.0, =2.2.0, =1.0.14,...

com.smoketurner.dropwizard:zipkin-core (>=1.3.12-1, <=1.3.12-4), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.8.3, <=2.10.1) +2 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.11.1)

com.rabbitmq:amqp-client MAVEN version 4.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.12-1, =2.8.3, =2.8.3, =2.10.1 -...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.13, <=2.12.9), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.7.15, <=2.8.2) +3 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.10.0)

com.rabbitmq:amqp-client MAVEN version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.11.13, =2.7.15, =2.7.15, =2.11.13, =2.12.9 -...

com.smoketurner.dropwizard:zipkin-core (>=1.3.8-1, <=1.3.9-1), io.dropwizard.metrics:metrics-graphite (4.1.0-rc3) +5 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.9.1)

com.rabbitmq:amqp-client MAVEN version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.8-1, =2.0.0-rc0+test8, =2.11.9, =2.7.12, =2.7.12, =2.11.9, =2.12.0...

com.meltwater:rxrabbit (1.3.0), com.rabbitmq.jms:rabbitmq-jms (>=1.8.0, <=1.8.1) +6 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.3.0)

com.rabbitmq:amqp-client MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.meltwater:rxrabbit 1.3.0 - com.rabbitmq.jms:rabbitmq-jms =1.8.0, =2.2.2, =2.2.2, =2.2.0, =2.2.0, =1.0.14,...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.13, <=2.12.9), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.7.15, <=2.8.2) +3 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.10.0)

com.rabbitmq:amqp-client MAVEN version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.11.13, =2.7.15, =2.7.15, =2.11.13, =2.12.9 -...

com.smoketurner.dropwizard:zipkin-core (>=1.3.5-2, <=1.3.5-5), io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.2, <=2.11.4) +3 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.7.0)

com.rabbitmq:amqp-client MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.5-2, =2.11.2, =2.7.7, =2.7.7, =2.11.2, =2.11.4 Source cves:...

com.smoketurner.dropwizard:zipkin-core (>=1.3.12-1, <=1.3.12-4), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.8.3, <=2.10.1) +2 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.11.1)

com.rabbitmq:amqp-client MAVEN version 4.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.12-1, =2.8.3, =2.8.3, =2.10.1 -...

com.smoketurner.dropwizard:zipkin-core (>=1.3.5-2, <=1.3.5-5), io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.2, <=2.11.4) +3 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.7.0)

com.rabbitmq:amqp-client MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.5-2, =2.11.2, =2.7.7, =2.7.7, =2.11.2, =2.11.4 Source cves:...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.13, <=2.12.9), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.7.15, <=2.8.2) +3 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.10.0)

com.rabbitmq:amqp-client MAVEN version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.11.13, =2.7.15, =2.7.15, =2.11.13, =2.12.9 -...

com.smoketurner.dropwizard:zipkin-core (>=1.3.12-1, <=1.3.12-4), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.8.3, <=2.10.1) +2 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.11.1)

com.rabbitmq:amqp-client MAVEN version 4.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.12-1, =2.8.3, =2.8.3, =2.10.1 -...

io.zipkin.zipkin2:zipkin-collector-rabbitmq (>=2.14.1, <=2.14.2), org.apache.zipkin.reporter2:zipkin-reporter-spring-beans (2.8.3) +2 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.11.0)

com.rabbitmq:amqp-client MAVEN version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.zipkin2:zipkin-collector-rabbitmq =2.14.1, =2.14.2 -...