com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

com.baidubce.formula:actuator-spring-boot-starter (>=1.3.2.0, <=2.1.1.1), com.baidubce.formula:circuitbreaker-spring-boot-starter (>=1.3.2.0, <=2.1.1.1) +182 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.11.release)

org.springframework:spring-web MAVEN version 5.0.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.baidubce.formula:actuator-spring-boot-starter =1.3.2.0, =1.3.2.0, =1.3.2.0, =1.4.0.1,...

app.myoss.cloud.boot:myoss-starter-apm (>=2.1.0.release, <=2.1.6.release), app.myoss.cloud.boot:myoss-starter-web (>=2.1.0.release, <=2.1.6.release) +1047 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.1.4.release)

org.springframework:spring-web MAVEN version 5.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - app.myoss.cloud.boot:myoss-starter-apm =2.1.0.release, =2.1.0.release, =2.1.2.release,...

cn.yusiwen:wxpay-spring-boot-example (>=1.0.0.release, <=1.0.1.release), cn.yusiwen:wxpay-spring-boot-starter (>=1.0.0.release, <=1.0.1.release) +84 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.2.20.release)

org.springframework:spring-web MAVEN version 5.2.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cn.yusiwen:wxpay-spring-boot-example =1.0.0.release, =1.0.0.release, =2.0.0, =2.0.0, =2.0....

cn.com.xuxiaowei.boot:spring-boot-starter-idempotent (0.0.2-alpha.1), cn.fanzy.minio:easy-minio-spring-boot-starter (>=1.0.0, <=1.0.2) +815 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.3.1)

org.springframework:spring-web MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cn.com.xuxiaowei.boot:spring-boot-starter-idempotent 0.0.2-alpha.1 -...

com.groupon.jenkins-ci.plugins:dotci (>=1.0.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +5 more potentially affected by CVE-2019-10315 via org.jenkins-ci.plugins:github-oauth (>=0.14, <=0.20)

org.jenkins-ci.plugins:github-oauth MAVEN version =0.14, =1.0.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.0.0, =1.0.0, =1.1.2 Source cves: CVE-2019-10315 Source advisory: OSV:GHSA-PHWV-CRGP-9R69...

MAL-2022-6296 Malicious code in starter-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9210f72432e30c8a8971391592a1868df8981aa891e80a7af8dbd2822f1b499d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starter-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9210f72432e30c8a8971391592a1868df8981aa891e80a7af8dbd2822f1b499d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2018-12432 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2018-12432 Source advisory: OSV:GHSA-G66Q-GRXC-64J3...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

com.groupon.jenkins-ci.plugins:dotci (>=2.10.0, <=2.28.1), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (1.618)

org.jenkins-ci.main:jenkins-core MAVEN version 1.618 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.10.0, =1.0.0, =1.1.3, =1.7.2, =1.3.0, =1.0.0, =1.0, =1....

io.oasp.java.modules:oasp4j-batch (>=1.5.0, <=2.6.1), org.springframework.batch:spring-batch-integration (>=3.0.0.release, <=3.0.8.release) +29 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.5.release)

org.springframework:spring-messaging MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - io.oasp.java.modules:oasp4j-batch =1.5.0, =3.0.0.release, =1.1.0.release,...

org.springframework.batch:spring-batch-integration (3.0.9.release), org.springframework.boot:spring-boot-starter-integration (>=1.1.11.release, <=1.1.12.release) +27 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.9.release)

org.springframework:spring-messaging MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.springframework.batch:spring-batch-integration 3.0.9.release -...

com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20) +147 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.3.29.release)

org.springframework:spring-beans MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate =2.3.12,...

africa.absa:inception-application (>=1.0.0, <=1.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +1214 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-webflux (>=2.0.0.release, <=2.5.11)

org.springframework.boot:spring-boot-starter-webflux MAVEN version =2.0.0.release, =1.0.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =2.1.2.release, =1.3, =0.5.0, =3.1.37, =3.1.13, =3.1.85, =3.1.13, =3.1.13, =3.1.295 - ch.mobi.mobitor:mobitor-doc 3.1.13 and more Source cves: CVE-2022-22965 Source...