com.github.zed-platform:zed-service-messagestore-attachment (0.0.20), com.northstrat:springsecurity3-websockets (0.1) +53 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.1.5.release)

org.springframework:spring-messaging MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - com.github.zed-platform:zed-service-messagestore-attachment 0.0.20 -...