com.ibeetl:beetl-framework-starter (>=1.1.40.release, <=1.1.44.release), com.ibeetl:beetlsql (>=2.10.13, <=2.10.18) +5 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.27)

com.ibeetl:beetl MAVEN version 2.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter =1.1.40.release, =2.10.13, =1.3.1, =1.4.2, =1.8.0.0, =2.1.4, =2.1.4, =2.1.5 Source cves:...

com.ibeetl:beetl-framework-starter (1.1.45.release), com.ibeetl:beetlsql (2.10.19) +1 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.28)

com.ibeetl:beetl MAVEN version 2.7.28 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter 1.1.45.release - com.ibeetl:beetlsql 2.10.19 - net.ymate.platform:ymate-platform-webmvc...

cn.js.icode:icode_common (6.2), cn.wizzer.app:wk-nb-web-platform (>=5.0.5, <=5.0.6) +4 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.8.1)

com.ibeetl:beetl MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cn.js.icode:icodecommon 6.2 - cn.wizzer.app:wk-nb-web-platform =5.0.5, =1.1.47.release, =2.1.8, =2.1.8, =2.2.1 Source cves:...

com.ibeetl:beetl-framework-starter (>=1.1.49.release, <=1.1.51.release), com.ibeetl:beetlsql (>=2.10.22, <=2.10.24) +3 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.8.2)

com.ibeetl:beetl MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter =1.1.49.release, =2.10.22, =1.8.8.2, =1.8.8.4 Source cves: CVE-2023-30331 Source advisory:...

com.ibeetl:beetl-framework-starter (>=1.1.58.release, <=1.1.60.release) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.8.6)

com.ibeetl:beetl MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter =1.1.58.release, =1.1.60.release Source cves: CVE-2023-30331 Source advisory:...

org.nutz:nutz-plugins-hotplug (1.r.67), org.nutz:nutz-plugins-ngrok (1.r.67) +3 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.8.7)

com.ibeetl:beetl MAVEN version 2.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - org.nutz:nutz-plugins-hotplug 1.r.67 - org.nutz:nutz-plugins-ngrok 1.r.67 - org.nutz:nutz-plugins-views 1.r.67 -...

com.ibeetl:beetl-framework-starter (1.1.62.release), org.nutz:nutzboot-starter-beetl (2.2.6) +1 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.9.2)

com.ibeetl:beetl MAVEN version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter 1.1.62.release - org.nutz:nutzboot-starter-beetl 2.2.6 - org.nutz:nutzboot-starter-beetlsql...

com.github.liaochong:html2excel (>=1.2.0, <=1.2.4), com.ibeetl:beetl-framework-starter (>=1.1.69.release, <=1.1.70.release) +5 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.9.6)

com.ibeetl:beetl MAVEN version 2.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.github.liaochong:html2excel =1.2.0, =1.1.69.release, =2.10.41, =1.5.6, =1.8.12.0, =1.8.17.1 - top.bayberry:bayberry-core...

com.github.liaochong:html2excel (>=1.3.0, <=1.4.1), com.github.liaochong:myexcel (2.0.0) +6 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.9.7)

com.ibeetl:beetl MAVEN version 2.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.github.liaochong:html2excel =1.3.0, =1.r.68.v20190220, =1.r.68.v20190220, =1.r.68.v20190220, =1.r.69.v20220215 -...

com.piggsoft:beetl-spring-boot-autoconfigue (>=0.0.1, <=0.0.3), com.piggsoft:beetl-spring-boot-starter (>=0.0.1, <=0.0.3) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.0)

com.ibeetl:beetl MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.piggsoft:beetl-spring-boot-autoconfigue =0.0.1, =0.0.1, =0.0.3 Source cves: CVE-2023-30331 Source advisory:...

MAL-2023-1337 Malicious code in virgil-spring-boot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7b81762635da58744d7567d3ac4b1bf12da5d3c72070a9d2260d40463fcdbb The OpenSSF Package Analysis project identified 'virgil-spring-boot-starter' @ 20.0.0 npm as malicious. It is considered malicious because: - Th...

com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20) +129 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (4.3.29.release)

org.springframework:spring-expression MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.12), ai.houyi:dorado (>=0.0.6, <=0.0.8) +1474 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (4.3.18.release)

org.springframework:spring-expression MAVEN version 4.3.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter =0.1.10, =0.0.6, =0.0.1...

com.baomidou:mybatisplus-spring-boot-starter (1.0.2) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.0.9)

com.baomidou:mybatis-plus MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatisplus-spring-boot-starter 1.0.2 Source cves: CVE-2023-25330 Source advisory:...

com.baomidou:mybatisplus-spring-boot-starter (1.0.3) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.1-beta)

com.baomidou:mybatis-plus MAVEN version 2.1-beta is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatisplus-spring-boot-starter 1.0.3 Source cves: CVE-2023-25330 Source advisory:...

com.baomidou:mybatis-plus-boot-starter (2.3.1) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.3.1)

com.baomidou:mybatis-plus MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatis-plus-boot-starter 2.3.1 Source cves: CVE-2023-25330 Source advisory:...

cn.bestwu.simpleframework:simpleframework-data-mybatis (>=0.1.31, <=0.1.33), com.baomidou:mybatis-plus-boot-starter (2.3.3) +2 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.3.3)

com.baomidou:mybatis-plus MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - cn.bestwu.simpleframework:simpleframework-data-mybatis =0.1.31, =1.1.18-release, =1.1.0-release,...

com.baomidou:mybatis-plus-boot-starter (2.3.2) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.3.2)

com.baomidou:mybatis-plus MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatis-plus-boot-starter 2.3.2 Source cves: CVE-2023-25330 Source advisory:...

com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.4.2) potentially affected by CVE-2023-28669 via org.jenkins-ci.plugins:jacoco (1.0.14)

org.jenkins-ci.plugins:jacoco MAVEN version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:jacoco and may be impacted: - com.groupon.jenkins.plugins:dotci-plugins-starter-pack =1.0.0, =1.4.2 Source cves: CVE-2023-28669...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.5.0, <=1.7.1) potentially affected by CVE-2023-28669 via org.jenkins-ci.plugins:jacoco (1.0.19)

org.jenkins-ci.plugins:jacoco MAVEN version 1.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:jacoco and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack =1.7.2, =1.5.0, =1.7.1 Source cves:...