cn.dev33:sa-token-jboot-plugin (>=1.29.1.trial, <=1.46.0), cn.dev33:sa-token-jfinal-plugin (>=1.29.1.trial, <=1.46.0) +8 more potentially affected by CVE-2023-49373 via com.jfinal:jfinal (4.9.17)

com.jfinal:jfinal MAVEN version 4.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dev33:sa-token-jboot-plugin =1.29.1.trial, =1.29.1.trial, =2.0.1, =2.1.0, =1.0.8, =3.13.0, =3.8.3.v20220902-release,...

cn.dev33:sa-token-jboot-plugin (>=1.29.1.trial, <=1.46.0), cn.dev33:sa-token-jfinal-plugin (>=1.29.1.trial, <=1.46.0) +8 more potentially affected by CVE-2023-49374 via com.jfinal:jfinal (4.9.17)

com.jfinal:jfinal MAVEN version 4.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dev33:sa-token-jboot-plugin =1.29.1.trial, =1.29.1.trial, =2.0.1, =2.1.0, =1.0.8, =3.13.0, =3.8.3.v20220902-release,...

cn.dev33:sa-token-jboot-plugin (>=1.29.1.trial, <=1.46.0), cn.dev33:sa-token-jfinal-plugin (>=1.29.1.trial, <=1.46.0) +8 more potentially affected by CVE-2023-49376 via com.jfinal:jfinal (4.9.17)

com.jfinal:jfinal MAVEN version 4.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dev33:sa-token-jboot-plugin =1.29.1.trial, =1.29.1.trial, =2.0.1, =2.1.0, =1.0.8, =3.13.0, =3.8.3.v20220902-release,...

com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9), com.bstek.ureport:ureport2-font (>=2.0.0, <=2.0.1) +13 more potentially affected by CVE-2023-48848 via com.bstek.ureport:ureport2-core (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-core MAVEN version =2.0.0, =2.0.0, =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2023-48848 Source advisory: GHSA-9VFC-QXC8-WRPQ...

org.springframework.boot:spring-boot-docs (1.1.1.release), org.springframework.boot:spring-boot-starter-actuator (1.1.1.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.1.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.1.release -...

org.springframework.boot:spring-boot-docs (1.1.12.release), org.springframework.boot:spring-boot-starter-actuator (1.1.12.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.12.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.12.release -...

org.springframework.boot:spring-boot-docs (1.1.2.release), org.springframework.boot:spring-boot-starter-actuator (1.1.2.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.2.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.2.release -...

com.github.zed-platform:zed-service-attachment-file (>=0.0.9, <=0.0.10), com.github.zed-platform:zed-service-document-mongo (>=0.0.8, <=0.0.10) +14 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.2.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.github.zed-platform:zed-service-attachment-file =0.0.9,...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (1.0.4), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (1.0.4) +27 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.4.4.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: -...

com.jdcloud.jdsf:spring-cloud-jdsf-core (1.0.0-edgware), com.taboola:async-profiler-actuator-endpoint (>=0.0.2, <=2.0.8) +27 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.20.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.jdcloud.jdsf:spring-cloud-jdsf-core 1.0.0-edgware -...

com.alibaba.cloud:spring-cloud-alibaba-sentinel-gateway (1.5.1.release), com.alibaba.cloud:spring-cloud-starter-bus-rocketmq (1.5.1.release) +41 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.21.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.alibaba.cloud:spring-cloud-alibaba-sentinel-gateway...

de.codecentric:spring-boot-starter-batch-web (>=1.2.0.release, <=1.2.2.release), io.fabric8:process-spring-boot-container (>=1.2.0.beta1, <=1.2.0.beta3) +7 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.5.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - de.codecentric:spring-boot-starter-batch-web =1.2.0.release,...

com.vilt-group.minium:minium-app (0.9.6), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +6 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.7.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.vilt-group.minium:minium-app 0.9.6 -...

com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1), de.codecentric:spring-boot-admin-sample (>=1.1.0, <=1.1.1) +6 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.9.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.bushidowallet:bushido-wallet-service =1.0.0, =1.1.0,...

org.springframework.boot:spring-boot-docs (1.1.10.release), org.springframework.boot:spring-boot-starter-actuator (1.1.10.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.10.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.10.release -...

cn.patterncat:event-trace-client (1.3.0), cn.patterncat:springboot-metrics-starter (>=0.0.1, <=0.0.8) +9 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.4.6.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - cn.patterncat:event-trace-client 1.3.0 -...

com.stormpath.spring:stormpath-sdk-examples-zuul-spring-cloud-starter (>=1.5.0, <=1.5.1), com.stormpath.spring:stormpath-zuul-spring-cloud-starter (>=1.5.0, <=1.5.1) +4 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: -...

org.springframework.boot:spring-boot-docs (1.1.11.release), org.springframework.boot:spring-boot-starter-actuator (1.1.11.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.11.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.11.release -...

Starter Templates <= 3.2.5 - Incorrect Authorization

Description The Starter Templates free and premium plugin for WordPress is vulnerable to unauthorized modification of data due to an incorrect capability check on the sseimport function in versions up to, and including, 3.2.5. This makes it possible for authenticated attackers, with...

Malicious code in starling-api-web-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e22d8859e6bb5960333c0025707f3f3d444ff2f97f492db74c277335efa08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...