cn.hutool:hutool-dfa (4.1.13), cn.hutool:hutool-http (4.1.13) potentially affected by CVE-2022-45689 via cn.hutool:hutool-json (4.1.13)

cn.hutool:hutool-json MAVEN version 4.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.13 - cn.hutool:hutool-http 4.1.13 Source cves: CVE-2022-45689 Source advisory:...

cn.hutool:hutool-dfa (4.5.0), cn.hutool:hutool-http (4.5.0) potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.5.0)

cn.hutool:hutool-json MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.5.0 - cn.hutool:hutool-http 4.5.0 Source cves: CVE-2022-45690 Source advisory:...

cn.hutool:hutool-dfa (4.0.10), cn.hutool:hutool-http (4.0.10) potentially affected by CVE-2022-45689 via cn.hutool:hutool-json (4.0.10)

cn.hutool:hutool-json MAVEN version 4.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.10 - cn.hutool:hutool-http 4.0.10 Source cves: CVE-2022-45689 Source advisory:...

cn.hutool:hutool-dfa (4.5.4), cn.hutool:hutool-http (4.5.4) potentially affected by CVE-2022-45689 via cn.hutool:hutool-json (4.5.4)

cn.hutool:hutool-json MAVEN version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.5.4 - cn.hutool:hutool-http 4.5.4 Source cves: CVE-2022-45689 Source advisory:...

cn.hutool:hutool-dfa (4.0.9), cn.hutool:hutool-http (4.0.9) +2 more potentially affected by CVE-2022-45688 via cn.hutool:hutool-json (4.0.9)

cn.hutool:hutool-json MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.9 - cn.hutool:hutool-http 4.0.9 - cn.virens:virens-util =1.0.7, =1.1.1 -...

cn.hutool:hutool-dfa (4.1.20), cn.hutool:hutool-http (4.1.20) potentially affected by CVE-2022-45688 via cn.hutool:hutool-json (4.1.20)

cn.hutool:hutool-json MAVEN version 4.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.20 - cn.hutool:hutool-http 4.1.20 Source cves: CVE-2022-45688 Source advisory:...

Improper Certificate Validation

cn.hutool:hutool-http is vulnerable to Improper certificate validation. The vulnerability exists due to the insufficient validations of TLS/SSL certificates in verify function in TrustAnyHostnameVerifierof class...

cn.virens:virens-oauth2 (1.3.7), cn.virens:virens-util (1.3.7) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.5.9)

cn.hutool:hutool-http MAVEN version 4.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.virens:virens-oauth2 1.3.7 - cn.virens:virens-util 1.3.7 Source cves: CVE-2022-22885 Source advisory:...

cn.virens:virens-oauth2 (>=1.0.0, <=1.3.2), cn.virens:virens-util (>=1.2.5, <=1.3.2) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.1.14)

cn.hutool:hutool-http MAVEN version 4.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.virens:virens-oauth2 =1.0.0, =1.2.5, =1.3.2 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.virens:virens-util (>=1.0.2, <=1.0.6) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.0.7)

cn.hutool:hutool-http MAVEN version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.virens:virens-util =1.0.2, =1.0.6 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.virens:virens-util (>=1.1.2, <=1.2.1) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.0.12)

cn.hutool:hutool-http MAVEN version 4.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.virens:virens-util =1.1.2, =1.2.1 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.virens:virens-oauth2 (1.3.4), cn.virens:virens-util (1.3.4) +1 more potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.1.19)

cn.hutool:hutool-http MAVEN version 4.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.virens:virens-oauth2 1.3.4 - cn.virens:virens-util 1.3.4 - org.code4everything:boot-surface =1.0.0, =1.0.8 Source...

org.code4everything:boot-surface (>=1.0.9, <=1.1.0) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.5.3)

cn.hutool:hutool-http MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - org.code4everything:boot-surface =1.0.9, =1.1.0 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.virens:virens-oauth2 (1.3.8), cn.virens:virens-util (1.3.8) +3 more potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.5.15)

cn.hutool:hutool-http MAVEN version 4.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.virens:virens-oauth2 1.3.8 - cn.virens:virens-util 1.3.8 - com.wuyushuo:spring-authx-boxes-boot-starter =1.1.0,...

cn.virens:virens-oauth2 (1.3.9), cn.virens:virens-util (1.3.9) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.5.16)

cn.hutool:hutool-http MAVEN version 4.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.virens:virens-oauth2 1.3.9 - cn.virens:virens-util 1.3.9 Source cves: CVE-2022-22885 Source advisory:...

com.github.seaframework:sea-core-basic (1.0.0), com.github.seaframework:sea-monitor (>=1.0.0, <=1.3.1) +5 more potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.5.17)

cn.hutool:hutool-http MAVEN version 4.5.17 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - com.github.seaframework:sea-core-basic 1.0.0 - com.github.seaframework:sea-monitor =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

cn.hutool:hutool-all (4.6.0), cn.hutool:hutool-bom (4.6.0) +1 more potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.0)

cn.hutool:hutool-http MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-all 4.6.0 - cn.hutool:hutool-bom 4.6.0 - me.zhyd.oauth:justauth 1.9.3 Source cves: CVE-2022-22885...

club.mrxiao:map-java-amap (3.0.2), club.mrxiao:map-java-amap-spring-boot-starter (3.0.2) +6 more potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.8)

cn.hutool:hutool-http MAVEN version 4.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - club.mrxiao:map-java-amap 3.0.2 - club.mrxiao:map-java-amap-spring-boot-starter 3.0.2 - club.mrxiao:map-java-baidu...

cn.hutool:hutool-bom (4.6.12) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.12)

cn.hutool:hutool-http MAVEN version 4.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.12 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.hutool:hutool-bom (4.6.13) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.13)

cn.hutool:hutool-http MAVEN version 4.6.13 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.13 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...