ROOT-APP-MAVEN-CVE-2021-22112 CVE-2021-22112 in org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2021-22112 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

Oracle MySQL Enterprise Monitor (Oct 2021 CPU)

The 8.0.25 versions of MySQL Enterprise Monitor installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2021 CPU advisory. - Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL component: Monitoring: General Spring Security. Supported...

cash.muro:cashid4spring (>=0.1.0-alpha, <=0.1.0-alpha2), cash.muro:cashidss (0.1.0-alpha) +703 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (>=5.4.0, <=5.4.3)

org.springframework.security:spring-security-web MAVEN version =5.4.0, =0.1.0-alpha, =0.1.0-alpha, =0.0.1, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.585.9 and more Source cves: CVE-2021-22112 Source...

at.molindo.social:spring-social-security (1.1.4.release), com.foreach.across.modules:admin-web-module (1.1.1.release) +88 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (3.2.9.release)

org.springframework.security:spring-security-web MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - at.molindo.social:spring-social-security 1.1.4.release ...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), at.researchstudio.sat:won-cryptography (>=0.4, <=0.6) +101 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (4.2.9.release)

org.springframework.security:spring-security-web MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter...

au.org.consumerdatastandards:client-cli (>=1.1.1, <=1.12.0), com.atlassian.asap:asap-server-spring-security (>=2.21.8, <=2.21.9) +107 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (4.2.11.release)

org.springframework.security:spring-security-web MAVEN version 4.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - au.org.consumerdatastandards:client-cli =1.1.1, =2.21....

be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3), com.github.yongjacky:jee.borneo.miri (1.1.6) +82 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (3.1.4.release)

org.springframework.security:spring-security-web MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - be.dnsbelgium:rdap-server =0.3.3, =1.6-2, =1.6.0, =1.6....

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +229 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (4.0.3.release)

org.springframework.security:spring-security-web MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: -...

com.cloudseal.client:cloudseal-spring-extension (>=1.2.1, <=1.2.7), com.cloudseal.client:spring-example (>=1.2.1, <=1.2.7) +135 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (3.1.3.release)

org.springframework.security:spring-security-web MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.cloudseal.client:cloudseal-spring-extension =1.2.1,...

com.github.waffle.demo:waffle-spring-filter (2.3.0), com.github.waffle.demo:waffle-spring-form (2.3.0) +41 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (4.2.17.release)

org.springframework.security:spring-security-web MAVEN version 4.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.waffle.demo:waffle-spring-filter 2.3.0 -...

fr.xebia.springframework:xebia-spring-security-extras (>=1.1.4, <=1.1.6), org.appfuse:appfuse-jsf (2.1.0-m2) +27 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (3.0.4.release)

org.springframework.security:spring-security-web MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - fr.xebia.springframework:xebia-spring-security-extras...

com.racquettrack:spring-security-oauth2-client (1.4), com.wichell:framework-web-security (1.0.0) +24 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (3.1.1.release)

org.springframework.security:spring-security-web MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.racquettrack:spring-security-oauth2-client 1.4 -...

br.com.damsete:logging (0.0.2), br.com.damsete:spring-security-jwt (0.0.1) +1364 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (>=5.3.0.release, <=5.3.7.release)

org.springframework.security:spring-security-web MAVEN version =5.3.0.release, =1.0.1, =0.5.0.release, =0.0.1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =0.3, =0.3, =0.3, =0.5 and more Source cves: CVE-2021-22112 Source advisory: OSV:GHSA-GQ28-H5VG-8PRX...

com.addc:addc-svr-mvc (>=2.6, <=2.9), com.addc:addc-web-mvc (>=2.6, <=2.9) +93 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (4.2.12.release)

org.springframework.security:spring-security-web MAVEN version 4.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.addc:addc-svr-mvc =2.6, =2.6, =2.6, =4.1.2, =4.1.2...

com.capitalone.dashboard:core (>=3.7.20, <=3.9.9), org.ff4j:ff4j-security-spring (>=1.8.2, <=1.8.7) +13 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (4.1.5.release)

org.springframework.security:spring-security-web MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.capitalone.dashboard:core =3.7.20, =1.8.2,...

cn.bestwu:security-oauth2-authorizationserver (1.0.1), cn.dceast.platform:platform-security-starter (2.2.3) +333 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (4.1.3.release)

org.springframework.security:spring-security-web MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - cn.bestwu:security-oauth2-authorizationserver 1.0.1 -...

co.paralleluniverse:comsat-spring-security (0.3.0), com.bq.corbel:oauth-server (>=1.31.1, <=1.35.0) +231 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (3.2.5.release)

org.springframework.security:spring-security-web MAVEN version 3.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - co.paralleluniverse:comsat-spring-security 0.3.0 -...

cash.muro:cashid4spring (>=0.1.0-alpha, <=0.1.0-alpha2), cash.muro:cashidss (0.1.0-alpha) +703 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (>=5.4.0, <=5.4.3)

org.springframework.security:spring-security-web MAVEN version =5.4.0, =0.1.0-alpha, =0.1.0-alpha, =0.0.1, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.585.9 and more Source cves: CVE-2021-22112 Source...

com.auth0:auth0-spring-security-api (>=1.3.1, <=1.4.0), com.capitalone.dashboard:hygieia-common (>=4.0.5, <=4.1.0) +29 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (4.2.15.release)

org.springframework.security:spring-security-web MAVEN version 4.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.auth0:auth0-spring-security-api =1.3.1, =4.0.5,...

com.github.lrkwz:urlmanaged-locale (0.0.1), com.revolsys.open:com.revolsys.open.orm (>=2012.07.30.release, <=2012.11.01.release) +30 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (3.0.7.release)

org.springframework.security:spring-security-web MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.lrkwz:urlmanaged-locale 0.0.1 -...